301 matches found
SUSE CVE-2005-3330
The httpsrequest function in Snoopy 1.2, as used in products such as 1 MagpieRSS, 2 WordPress, 3 Ampache, and 4 Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function...
SUSE CVE-2007-4437
SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information...
SUSE CVE-2007-4438
Session fixation vulnerability in Ampache before 3.3.3.5 allows remote attackers to hijack web sessions via unspecified vectors...
CVE-2023-0771
SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...
UBUNTU-CVE-2023-0771
SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...
Sql injection
SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...
CVE-2023-0771
SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...
CVE-2023-0771
CVE-2023-0771 affects the Ampache project (ampache/ampache) prior to version 5.5.7. The issue is a SQL Injection in the web application, arising from the underlying code as described across multiple sources, with impact stated as high for confidentiality, integrity, and availability. The document...
CVE-2023-0771 SQL Injection in ampache/ampache
SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...
Ampache SQL注入漏洞
Ampache is a web-based audio/video application and file manager. An SQL injection vulnerability exists in versions of ampache prior to 5.5.7. An attacker exploits this vulnerability to perform SQL injection attacks...
PT-2023-16517 · Ampache · Ampache
Name of the Vulnerable Software and Affected Versions: ampache/ampache versions prior to 5.5.7 Description: The issue is related to SQL Injection in the GitHub repository ampache/ampache. Recommendations: For versions prior to 5.5.7, update to version 5.5.7 or later to resolve the issue...
CVE-2023-0771 SQL Injection in ampache/ampache
SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...
Ampache Cross-Site Scripting Vulnerability (CNVD-2023-07918)
Ampache is a web-based audio/video application and file manager. cross-site scripting vulnerability exists in versions prior to Ampache 5.5.7, which stems from the fact that a user can insert malicious js in url-specific parameters and send links to other users, leading to a cross-site scripting...
UBUNTU-CVE-2023-0606
Cross-site Scripting XSS - Reflected in GitHub repository ampache/ampache prior to 5.5.7...
CVE-2023-0606 Cross-site Scripting (XSS) - Reflected in ampache/ampache
Cross-site Scripting XSS - Reflected in GitHub repository ampache/ampache prior to 5.5.7...
CVE-2023-0606
CVE-2023-0606 is a reflected Cross-site Scripting (XSS) vulnerability in the Ampache web application, occurring in ampache/ampache prior to version 5.5.7. The issue arises from how URL-specific parameters can be manipulated to execute script in a victim’s browser. Several connected sources descri...
CVE-2023-0606 Cross-site Scripting (XSS) - Reflected in ampache/ampache
Cross-site Scripting XSS - Reflected in GitHub repository ampache/ampache prior to 5.5.7...
Ampache 跨站脚本漏洞
Ampache is a web-based audio/video application and file manager. cross-site scripting vulnerability exists in versions prior to Ampache 5.5.7, which stems from the fact that a user can insert malicious js in url-specific parameters and send links to other users, leading to a cross-site scripting...
Reflected Cross Site Scripting
Description User can be input malicious js in param action in url http://localhost//stats.php?action=injecthere&userid=1 and send link to other user can be steal cookie of other user. Param action not input validation from user on line 71 in file...