Lucene search
+L

72 matches found

Positive Technologies
Positive Technologies
•added 2026/05/30 12:00 a.m.•35 views

PT-2026-45119

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the genre parameter. Attackers can send GET requests to genre.php with crafted SQL payloads in the genre parameter to extract...

8.8CVSS6.1AI score0.0027EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/30 12:00 a.m.•7 views

CVE-2018-25419: Improper Neutralization of Special Elements used in an SQL Command

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the genre parameter. Attackers can send GET requests to genre.php with crafted SQL payloads in the genre parameter to extract...

8.8CVSS6.5AI score0.0027EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/04/18 7:22 a.m.•14 views

CVE-2026-37339

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewgenre.php...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/16 3:31 p.m.•22 views

EUVD-2026-23253

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewgenre.php...

5.9AI score0.00468EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/16 3:17 p.m.•25 views

CVE-2026-37339

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewgenre.php...

9.8CVSS0.00468EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/16 12:00 a.m.•11 views

CVE-2026-37339

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewgenre.php...

5.8AI score0.00468EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/16 12:00 a.m.•43 views

CVE-2026-37339

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewgenre.php...

0.00468EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/16 12:00 a.m.•21 views

PT-2026-33329

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Music Cloud Community System version 1.0 Description An issue exists in the file '/music/view genre.php' that allows for SQL Injection, a technique where malicious SQL statements are inserted into entry fields for executi...

6AI score0.00468EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/16 12:00 a.m.•25 views

CVE-2026-37339

The SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection within the /music/view_genre.php file. This vulnerability occurs because the application fails to properly neutralize special elements used in SQL commands, allowing an attacker to insert malicious SQL stat...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/16 12:00 a.m.•25 views

SourceCodester Simple Music Cloud Community System 安全漏洞

SourceCodester Simple Music Cloud Community System is an open-source simple music cloud community system developed by SourceCodester. Version 1.0 of the SourceCodester Simple Music Cloud Community System contains a security vulnerability, which stems from the file /music/viewgenre.php being...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/06 12:19 p.m.•17 views

CVE-2018-25197

PlayJoom 0.10.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the catid parameter. Attackers can send GET requests to index.php with option=complayjoom&view=genre&catid=SQL to extract sensitive...

8.8CVSS6.5AI score0.00241EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/03/06 12:19 p.m.•65 views

CVE-2018-25197

PlayJoom 0.10.1 contains an unauthenticated SQL injection in the catid parameter of the genre view (GET request to index.php?option=com_playjoom&view=genre&catid=[SQL]). The root cause is improper handling of user-controlled input leading to arbitrary SQL queries, enabling extraction of database ...

8.8CVSS6.5AI score0.00241EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/17 5:50 p.m.•22 views

EUVD-2025-34915

ClipBucket v5 is an open source video sharing platform. ClipBucket v5 through build 5.5.2 145 allows stored cross-site scripting XSS in multiple video and photo metadata fields. For videos the Tags field and the Genre, Actors, Producer, Executive Producer, and Director fields in Movieinfos accept...

5.4CVSS5.7AI score0.00262EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2020-14968

Malware in sbrugna...

9.8CVSS8.1AI score0.01116EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•6 views

Malicious code in test-mlw2-kirns-genre (npm)

The package test-mlw2-kirns-genre was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•4 views

MAL-2025-35623 Malicious code in test-mlw2-kirns-genre (npm)

The package test-mlw2-kirns-genre was found to contain malicious code...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 10:34 a.m.•27 views

CVE-2024-42796

An Incorrect Access Control vulnerability was found in /music/ajax.php?action=deletegenre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music genre entries...

5.9CVSS7AI score0.00231EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:18 p.m.•17 views

CVE-2020-22203

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

9.8CVSS8.2AI score0.01116EPSS
SaveExploits1
OSV
OSV
•added 2024/09/16 8:15 p.m.•19 views

CVE-2024-42796

An Incorrect Access Control vulnerability was found in /music/ajax.php?action=deletegenre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music genre entries...

5.9CVSS5.8AI score0.00231EPSS
SaveExploits1References2
CVE
CVE
•added 2024/09/16 12:00 a.m.•80 views

CVE-2024-42796

The Kashipara Music Management System v1.0 is affected by an Incorrect Access Control vulnerability in the /music/ajax.php?action=delete_genre API endpoint. This flaw allows an unauthenticated attacker to delete valid music genre entries. As a workaround, it is recommended to restrict access to t...

5.9CVSS5.8AI score0.00231EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder