Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-3833. PoCs published by r0t3d3Vil.
AI-analyzed exploit summary The provided text describes SQL injection and XSS vulnerabilities in Tunez, but does not include actual exploit code. It references a SecurityFocus BID and outlines potential impacts without technical implementation details.
Description
SQL injection vulnerability in songinfo.php in Tunez 1.21 and earlier allows remote attackers to execute arbitrary SQL commands via the song_id parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by r0t3d3Vil · textwebappsphp
https://www.exploit-db.com/exploits/26565
The provided text describes SQL injection and XSS vulnerabilities in Tunez, but does not include actual exploit code. It references a SecurityFocus BID and outlines potential impacts without technical implementation details.
Classification
Writeup 90%
Attack Type
Sqli | Xss
Complexity
Trivial
Reliability
Theoretical
Target:
Tunez (version unspecified)
No auth needed
Prerequisites:
Access to the vulnerable Tunez application
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (5)
Core 5
Core References
Exploit vdb-entry
x_refsource_osvdb
http://www.osvdb.org/21062
Exploit, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17692
Third Party Advisory x_refsource_misc
http://pridels0.blogspot.com/2005/11/tunez-sql-and-xss-vuln.html
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/15548
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2556
Scores
EPSS
0.0116
EPSS Percentile
63.0%
Details
Status
published
Products (13)
tunez/tunez
0.1
tunez/tunez
0.2
tunez/tunez
0.3
tunez/tunez
0.4
tunez/tunez
0.5
tunez/tunez
0.5.5
tunez/tunez
0.7
tunez/tunez
0.9
tunez/tunez
1.0.0
tunez/tunez
1.1
... and 3 more
Published
Nov 26, 2005
Tracked Since
Feb 18, 2026