72 matches found
PT-2026-45119
AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the genre parameter. Attackers can send GET requests to genre.php with crafted SQL payloads in the genre parameter to extract...
CVE-2018-25419: Improper Neutralization of Special Elements used in an SQL Command
AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the genre parameter. Attackers can send GET requests to genre.php with crafted SQL payloads in the genre parameter to extract...
CVE-2026-37339
SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewgenre.php...
EUVD-2026-23253
SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewgenre.php...
CVE-2026-37339
SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewgenre.php...
CVE-2026-37339
SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewgenre.php...
CVE-2026-37339
SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewgenre.php...
PT-2026-33329
Name of the Vulnerable Software and Affected Versions SourceCodester Simple Music Cloud Community System version 1.0 Description An issue exists in the file '/music/view genre.php' that allows for SQL Injection, a technique where malicious SQL statements are inserted into entry fields for executi...
CVE-2026-37339
The SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection within the /music/view_genre.php file. This vulnerability occurs because the application fails to properly neutralize special elements used in SQL commands, allowing an attacker to insert malicious SQL stat...
SourceCodester Simple Music Cloud Community System 安全漏洞
SourceCodester Simple Music Cloud Community System is an open-source simple music cloud community system developed by SourceCodester. Version 1.0 of the SourceCodester Simple Music Cloud Community System contains a security vulnerability, which stems from the file /music/viewgenre.php being...
CVE-2018-25197
PlayJoom 0.10.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the catid parameter. Attackers can send GET requests to index.php with option=complayjoom&view=genre&catid=SQL to extract sensitive...
CVE-2018-25197
PlayJoom 0.10.1 contains an unauthenticated SQL injection in the catid parameter of the genre view (GET request to index.php?option=com_playjoom&view=genre&catid=[SQL]). The root cause is improper handling of user-controlled input leading to arbitrary SQL queries, enabling extraction of database ...
EUVD-2025-34915
ClipBucket v5 is an open source video sharing platform. ClipBucket v5 through build 5.5.2 145 allows stored cross-site scripting XSS in multiple video and photo metadata fields. For videos the Tags field and the Genre, Actors, Producer, Executive Producer, and Director fields in Movieinfos accept...
EUVD-2020-14968
Malware in sbrugna...
Malicious code in test-mlw2-kirns-genre (npm)
The package test-mlw2-kirns-genre was found to contain malicious code...
MAL-2025-35623 Malicious code in test-mlw2-kirns-genre (npm)
The package test-mlw2-kirns-genre was found to contain malicious code...
CVE-2024-42796
An Incorrect Access Control vulnerability was found in /music/ajax.php?action=deletegenre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music genre entries...
CVE-2020-22203
SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...
CVE-2024-42796
An Incorrect Access Control vulnerability was found in /music/ajax.php?action=deletegenre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music genre entries...
CVE-2024-42796
The Kashipara Music Management System v1.0 is affected by an Incorrect Access Control vulnerability in the /music/ajax.php?action=delete_genre API endpoint. This flaw allows an unauthenticated attacker to delete valid music genre entries. As a workaround, it is recommended to restrict access to t...