Lucene search
+L

72 matches found

Positive Technologies
Positive Technologies
•added 2024/09/16 12:00 a.m.•29 views

PT-2024-30169 · Unknown · Kashipara Music Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: An Incorrect Access Control issue was found in the "/music/ajax.php?action=delete genre" API endpoint. This allows an unauthenticated attacker to delete valid music genre entries...

5.9CVSS7AI score0.00231EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/16 12:00 a.m.•9 views

CVE-2024-42796: Improper Access Control

An Incorrect Access Control vulnerability was found in /music/ajax.php?action=deletegenre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music genre entries...

5.9CVSS5.8AI score0.00231EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/09/16 12:00 a.m.•34 views

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. A security vulnerability exists in Kashipara Music Management System version v1.0, which stems from faulty access control in /music/ajax.php?action=deletegenre, which could allow an unauthenticated attacker to delete...

5.9CVSS6.8AI score0.00231EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/09/16 12:00 a.m.•23 views

CVE-2024-42796

An Incorrect Access Control vulnerability was found in /music/ajax.php?action=deletegenre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music genre entries...

6.9AI score0.00231EPSS
SaveExploits1References2
OSV
OSV
•added 2024/08/26 4:15 p.m.•22 views

CVE-2024-42791

A Cross-Site Request Forgery CSRF vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=deletegenre...

8.8CVSS5.7AI score0.00616EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/08/26 12:00 a.m.•18 views

CVE-2024-42791

A Cross-Site Request Forgery CSRF vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=deletegenre...

7.1AI score0.00616EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/08/26 12:00 a.m.•22 views

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. A cross-site request forgery vulnerability exists in Kashipara Music Management System v1.0, which originates from /music/ajax.php?action=deletegenre does not adequately verify that the request comes from a trusted use...

8.8CVSS6.8AI score0.00616EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/08/26 12:00 a.m.•15 views

PT-2024-30164 · Unknown · Kashipara Music Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: A Cross-Site Request Forgery CSRF vulnerability was found in the Kashipara Music Management System via the /music/ajax.php endpoint, specifically with the action=delete genre paramete...

8.8CVSS6.8AI score0.00616EPSS
SaveExploits1References9
OSV
OSV
•added 2024/08/21 6:15 p.m.•19 views

CVE-2024-42780

An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=savegenre" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file...

8.8CVSS6AI score0.00795EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/08/21 12:00 a.m.•23 views

PT-2024-30152 · Unknown · Kashipara Music Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save genre" in Kashipara Music Management System. This allows attackers to execute arbitrary code via...

8.8CVSS7.6AI score0.00795EPSS
SaveExploits1References9
OSV
OSV
•added 2021/06/16 6:15 p.m.•20 views

CVE-2020-22203

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

9.8CVSS5.8AI score0.01116EPSS
SaveExploits1References1
NVD
NVD
•added 2021/06/16 6:15 p.m.•41 views

CVE-2020-22203

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

9.8CVSS0.01116EPSS
SaveExploits1References1
Prion
Prion
•added 2021/06/16 6:15 p.m.•32 views

Sql injection

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

7.5CVSS9.7AI score0.01116EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/06/16 5:05 p.m.•53 views

CVE-2020-22203

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

9.9AI score0.01116EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/06/16 12:00 a.m.•13 views

PHPCMS SQL注入漏洞

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, images, downloads, information, products and so on. A SQL injection vulnerability exists in phpCMS because the genre parameter in the yp/job.php file is not handled securely,...

9.8CVSS8.7AI score0.01116EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/16 12:00 a.m.•8 views

CVE-2020-22203: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

9.8CVSS5.8AI score0.01116EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/06/16 12:00 a.m.•1 views

PT-2021-10746

Name of the Vulnerable Software and Affected Versions phpCMS 2008 sp4 Description The issue is related to SQL Injection in phpCMS via the genre parameter to "yp/job.php" API endpoint. Recommendations For phpCMS 2008 sp4, as a temporary workaround, consider restricting access to the "yp/job.php" A...

9.8CVSS0.01116EPSS
SaveExploits1References4
Fedora
Fedora
•added 2020/05/08 3:32 a.m.•41 views

[SECURITY] Fedora 30 Update: teeworlds-0.7.5-1.fc30

The game features cartoon-themed graphics and physics, and relies heavily on classic shooter weaponry and gameplay. The controls are heavily inspired by the FPS genre of computer games...

9.8CVSS1.1AI score0.03031EPSS
SaveExploits0
Fedora
Fedora
•added 2019/05/07 4:47 p.m.•44 views

[SECURITY] Fedora 30 Update: teeworlds-0.7.3.1-2.fc30

The game features cartoon-themed graphics and physics, and relies heavily on classic shooter weaponry and gameplay. The controls are heavily inspired by the FPS genre of computer games...

9.8CVSS1.1AI score0.04967EPSS
SaveExploits1
Fedora
Fedora
•added 2018/10/31 4:42 p.m.•27 views

[SECURITY] Fedora 29 Update: teeworlds-0.6.5-1.fc29

The game features cartoon-themed graphics and physics, and relies heavily on classic shooter weaponry and gameplay. The controls are heavily inspired by the FPS genre of computer games...

7.5CVSS1.1AI score0.02942EPSS
SaveExploits0
Rows per page
Query Builder