Lucene search
+L

15 matches found

Positive Technologies
Positive Technologies
•added 2026/04/16 12:00 a.m.•27 views

PT-2026-33327

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Music Cloud Community System version 1.0 Description SQL Injection is possible in the file '/music/view playlist.php'. Recommendations At the moment, there is no information about a newer version that contains a fix for...

7.3CVSS5.1AI score0.00286EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/16 12:00 a.m.•8 views

CVE-2026-37338: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewuser.php...

9.4CVSS5.8AI score0.00411EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/04/16 12:00 a.m.•9 views

CVE-2026-37336

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewmusic.php...

7.3CVSS5.9AI score0.00286EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/16 12:00 a.m.•7 views

CVE-2026-37337: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewplaylist.php...

7.3CVSS5.8AI score0.00286EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/16 12:00 a.m.•8 views

CVE-2026-37340: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/editmusic.php...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/16 12:00 a.m.•8 views

CVE-2026-37339: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewgenre.php...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/16 12:00 a.m.•8 views

CVE-2026-37338

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewuser.php...

5.8AI score0.00411EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/16 12:00 a.m.•15 views

CVE-2026-37336

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewmusic.php...

5.8AI score0.00286EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/16 12:00 a.m.•6 views

CVE-2026-37336: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewmusic.php...

7.3CVSS5.8AI score0.00286EPSS
SaveExploits0References2
NVD
NVD
•added 2024/11/10 10:15 a.m.•32 views

CVE-2024-11054

A vulnerability classified as critical was found in SourceCodester Simple Music Cloud Community System 1.0. This vulnerability affects unknown code of the file /music/ajax.php?action=signup. The manipulation of the argument pp leads to unrestricted upload. The attack can be initiated remotely. Th...

9.8CVSS0.00527EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/11/10 9:31 a.m.•25 views

CVE-2024-11054 SourceCodester Simple Music Cloud Community System ajax.php unrestricted upload

A vulnerability classified as critical was found in SourceCodester Simple Music Cloud Community System 1.0. This vulnerability affects unknown code of the file /music/ajax.php?action=signup. The manipulation of the argument pp leads to unrestricted upload. The attack can be initiated remotely. Th...

6.5CVSS7.1AI score0.00527EPSS
SaveExploits1References5
CVE
CVE
•added 2024/11/10 9:31 a.m.•83 views

CVE-2024-11054

CVE-2024-11054 affects SourceCodester Simple Music Cloud Community System 1.0, specifically the endpoint /music/ajax.php?action=signup where the argument/parameter named pp can be manipulated to achieve an unrestricted file upload. The vulnerability is remotely exploitable and was publicly disclo...

9.8CVSS6.9AI score0.00527EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/10 12:00 a.m.•5 views

CVE-2024-11054: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in SourceCodester Simple Music Cloud Community System 1.0. This vulnerability affects unknown code of the file /music/ajax.php?action=signup. The manipulation of the argument pp leads to unrestricted upload. The attack can be initiated remotely. Th...

9.8CVSS6.3AI score0.00527EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/01/21 12:00 a.m.•18 views

Sourcecodester Simple Music Clour Community System SQL注入漏洞

Sourcecodester Simple Music Clour Community System is a simple music cloud community system. sourcecodester Simple Music Clour Community System has a SQL injection vulnerability in version v1.0, which originates from the product / music/ajax.php page fails to properly filter the email parameter f...

10CVSS6AI score0.01556EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2022/01/06 12:00 a.m.•427 views

Simple Music Cloud Community System 1.0 SQL Injection

Title: Simple Music Cloud Community System 1.0 SQL - Injections Author: nu11secur1ty Date: 01.05.2022 Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/14605/simple-music-cloud-community-system-using-phpmysqli-source-code.html Description: The email...

0.3AI score
SaveExploits0
Rows per page
Query Builder