Lucene search
+L

4559 matches found

Cvelist
Cvelist
added 2024/08/27 10:00 p.m.40 views

CVE-2024-8221 SourceCodester Music Gallery Site manage_category.php sql injection

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

6.5CVSS0.0059EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/08/27 10:00 p.m.13 views

CVE-2024-8221 SourceCodester Music Gallery Site manage_category.php sql injection

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

6.5CVSS9.7AI score0.0059EPSS
SaveExploits1References5
CVE
CVE
added 2024/08/27 10:00 p.m.69 views

CVE-2024-8221

CVE-2024-8221 affects SourceCodester Music Gallery Site 1.0. The vulnerability is an SQL injection in the /admin/categories/manage_category.php file caused by manipulating the id parameter. It is exploitable remotely and is described as critical in multiple sources. Some documents also suggest a ...

9.8CVSS7.4AI score0.0059EPSS
SaveExploits1References5Affected Software1
Patchstack
Patchstack
added 2024/08/27 1:38 a.m.7 views

WordPress Music Request Manager plugin <= 1.3 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Bob Matyas in WordPress Plugin Music Request Manager versions = 1.3...

6.1CVSS6.4AI score0.00325EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2024/08/27 1:32 a.m.11 views

WordPress Music Request Manager plugin <= 1.3 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Music Request Manager versions = 1.3...

6.1CVSS6.2AI score0.00363EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2024/08/27 1:28 a.m.9 views

WordPress Music Request Manager plugin <= 1.3 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Music Request Manager versions = 1.3...

6.1CVSS6.1AI score0.00187EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/08/27 12:00 a.m.10 views

Music Gallery Site 安全漏洞

Music Gallery Site is a music gallery site by the individual developer Carlo Montero. A security vulnerability exists in Music Gallery Site version 1.0, which stems from the manipulation of the parameter id in the file /admin/categories/managecategory.php that can lead to SQL injection...

9.8CVSS6.7AI score0.0059EPSS
SaveExploits1References6
Patchstack
Patchstack
added 2024/08/27 12:00 a.m.18 views

WordPress Music Request Manager Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Music Request Manager Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-6017 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 6d9fb2505e28 Credits Bob Matyas Require...

6.1CVSS6.7AI score0.00187EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/27 12:00 a.m.14 views

PT-2024-38881 · Unknown · Sourcecodester Music Gallery Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Music Gallery Site version 1.0 Description: A critical vulnerability has been found in SourceCodester Music Gallery Site. This affects an unknown part of the file /admin/?page=musics/manage music. The manipulation of the id...

9.8CVSS7.2AI score0.0059EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2024/08/27 12:00 a.m.13 views

PT-2024-38882 · Unknown · Sourcecodester Music Gallery Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Music Gallery Site version 1.0 Description: A critical vulnerability was found in SourceCodester Music Gallery Site. This issue affects unknown code of the file /classes/Master.php?f=delete category. The manipulation of the id...

9.8CVSS7.2AI score0.0059EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2024/08/27 12:00 a.m.10 views

Music Gallery Site SQL注入漏洞

Music Gallery Site is a music gallery site by Carlo Montero's personal developer. A SQL injection vulnerability exists in Music Gallery Site version 1.0, which stems from the manipulation of the parameter id in the file /admin/?page=musics/managemusic that can lead to SQL injection...

9.8CVSS6.9AI score0.0059EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/08/27 12:00 a.m.9 views

Music Gallery Site SQL注入漏洞

Music Gallery Site is a music gallery site by Carlo Montero's personal developer. A SQL injection vulnerability exists in Music Gallery Site version 1.0, which stems from the manipulation of the parameter id in the file /classes/Master.php?f=deletecategory that can lead to SQL injection...

9.8CVSS6.9AI score0.0059EPSS
SaveExploits1References6
Patchstack
Patchstack
added 2024/08/27 12:00 a.m.15 views

WordPress Music Request Manager Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Music Request Manager Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6018 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 864294ddb006 Credits Bob Matyas...

6.1CVSS5.8AI score0.00325EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2024/08/27 12:00 a.m.23 views

WordPress Music Request Manager Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Music Request Manager Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6019 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 635b9b6901ac Credits Bob Matyas...

6.1CVSS5.8AI score0.00363EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/08/26 5:15 p.m.8 views

CVE-2024-42792

A Cross-Site Request Forgery CSRF vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=deleteplaylist page...

3.5CVSS5.7AI score0.00199EPSS
SaveExploits1References2
NVD
NVD
added 2024/08/26 5:15 p.m.27 views

CVE-2024-42790

A Reflected Cross Site Scripting XSS vulnerability was found in "/music/index.php?page=test" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via the "page" parameter...

6.1CVSS0.00489EPSS
SaveExploits1References2
OSV
OSV
added 2024/08/26 5:15 p.m.10 views

CVE-2024-42790

A Reflected Cross Site Scripting XSS vulnerability was found in "/music/index.php?page=test" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via the "page" parameter...

5.4CVSS6.1AI score0.00489EPSS
SaveExploits1References2
NVD
NVD
added 2024/08/26 5:15 p.m.21 views

CVE-2024-42792

A Cross-Site Request Forgery CSRF vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=deleteplaylist page...

3.5CVSS0.00199EPSS
SaveExploits1References2
OSV
OSV
added 2024/08/26 4:15 p.m.13 views

CVE-2024-42788

A Stored Cross Site Scripting XSS vulnerability was found in "/music/ajax.php?action=savemusic" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via "title" & "artist" parameter fields...

6.1CVSS6.1AI score0.00517EPSS
SaveExploits1References2
NVD
NVD
added 2024/08/26 4:15 p.m.21 views

CVE-2024-42791

A Cross-Site Request Forgery CSRF vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=deletegenre...

8.8CVSS0.00616EPSS
SaveExploits1References2
Rows per page
Query Builder