Description
SQL injection and cross-site scripting (XSS) vulnerabilities exist in Maian Music. Multiple parameters lack proper input validation for database queries and HTML rendering.
Impact
SQL injection allows extraction of customer data, order information, and administrative credentials. XSS enables session hijacking and potential theft of customer information.
Solution
Upgrade to the latest version of Maian Music. Apply parameterized queries and output encoding.