Lucene search
+L

4559 matches found

CVE
CVE
added 2023/02/22 6:12 p.m.68 views

CVE-2023-0961

CVE-2023-0961 affects SourceCodester Music Gallery Site 1.0. The vulnerability is an SQL injection in the view_music_details.php GET handler via the id parameter, allowing remote exploitation. Exploits have been disclosed publicly (e.g., Exploit-DB entry 51290). Several sources reiterate a critic...

9.8CVSS8.2AI score0.01883EPSS
SaveExploits5References3Affected Software1
CNNVD
CNNVD
added 2023/02/22 12:00 a.m.10 views

Music Gallery Site SQL注入漏洞

Music Gallery Site is a music gallery site by the individual developer Carlo Montero. A SQL injection vulnerability exists in SourceCodester Music Gallery Site version 1.0, which stems from a problem in the file viewmusicdetails.php, where manipulation of the parameter id can lead to sql injectio...

9.8CVSS6.9AI score0.01883EPSS
SaveExploits5References5
CNNVD
CNNVD
added 2023/02/22 12:00 a.m.11 views

Music Gallery Site 访问控制错误漏洞

Music Gallery Site is a music gallery site by the individual developer Carlo Montero. An Access Control Error vulnerability exists in version 1.0 of SourceCodester Music Gallery Site, which stems from a problem with the file Users.php that can lead to incorrect access control...

9.8CVSS7.4AI score0.0467EPSS
SaveExploits5References6
Positive Technologies
Positive Technologies
added 2023/02/22 12:00 a.m.9 views

PT-2023-16645 · Unknown · Sourcecodester Music Gallery Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Music Gallery Site version 1.0 Description: A critical issue has been found in the file view music details.php of the component GET Request Handler, where the manipulation of the id argument leads to sql injection. This issue c...

9.8CVSS7.5AI score0.01883EPSS
SaveExploits5References6
CNNVD
CNNVD
added 2023/02/22 12:00 a.m.14 views

Music Gallery Site SQL注入漏洞

Music Gallery Site is a music gallery site by the individual developer Carlo Montero. A SQL injection vulnerability exists in SourceCodester Music Gallery Site version 1.0, which stems from a problem in the file Master.php, where manipulation of the parameter id can lead to sql injection...

8.8CVSS6.9AI score0.01741EPSS
SaveExploits5References5
Positive Technologies
Positive Technologies
added 2023/02/22 12:00 a.m.13 views

PT-2023-16646 · Unknown · Sourcecodester Music Gallery Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Music Gallery Site version 1.0 Description: A critical issue has been found in the SourceCodester Music Gallery Site, affecting the Master.php file of the GET Request Handler component. The manipulation of the id argument leads...

8.8CVSS8AI score0.01741EPSS
SaveExploits5References6
Openbugbounty
Openbugbounty
added 2023/02/21 5:42 p.m.13 views

verti-music-hall.de Cross Site Scripting vulnerability OBB-3200611

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
added 2023/02/21 10:15 a.m.36 views

CVE-2023-0938

A vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0. This affects an unknown part of the file musiclist.php of the component GET Request Handler. The manipulation of the argument cid leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS7.4AI score0.01785EPSS
SaveExploits5References3
OSV
OSV
added 2023/02/21 10:15 a.m.12 views

CVE-2023-0938

A vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0. This affects an unknown part of the file musiclist.php of the component GET Request Handler. The manipulation of the argument cid leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS6.4AI score0.01785EPSS
SaveExploits5References3
Prion
Prion
added 2023/02/21 10:15 a.m.19 views

Sql injection

A vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0. This affects an unknown part of the file musiclist.php of the component GET Request Handler. The manipulation of the argument cid leads to sql injection. It is possible to initiate the attack remotely...

6.5CVSS9.8AI score0.01785EPSS
SaveExploits5References3Affected Software1
Cvelist
Cvelist
added 2023/02/21 9:30 a.m.48 views

CVE-2023-0938 SourceCodester Music Gallery Site GET Request music_list.php sql injection

A vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0. This affects an unknown part of the file musiclist.php of the component GET Request Handler. The manipulation of the argument cid leads to sql injection. It is possible to initiate the attack remotely...

6.5CVSS10AI score0.01785EPSS
SaveExploits5References3
CVE
CVE
added 2023/02/21 9:30 a.m.75 views

CVE-2023-0938

CVE-2023-0938 affects SourceCodester Music Gallery Site 1.0, specifically the GET Request Handler’s music_list.php. The vulnerability arises from unsafely handling the URL parameter cid , allowing remote SQL injection. Public exploits exist (e.g., Exploit-DB), indicating practical exploitability....

9.8CVSS8.2AI score0.01785EPSS
SaveExploits5References3Affected Software1
CNNVD
CNNVD
added 2023/02/21 12:00 a.m.13 views

Music Gallery Site SQL注入漏洞

Music Gallery Site is a music gallery site by the individual developer Carlo Montero. A SQL injection vulnerability exists in Music Gallery Site version 1.0, which stems from an incorrect manipulation of the parameter cid resulting in sql injection...

9.8CVSS7AI score0.01785EPSS
SaveExploits5References6
Positive Technologies
Positive Technologies
added 2023/02/21 12:00 a.m.11 views

PT-2023-16625 · Unknown · Sourcecodester Music Gallery Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Music Gallery Site version 1.0 Description: A critical issue has been discovered, affecting the GET Request Handler component in the music list.php file. The manipulation of the cid argument leads to SQL injection, allowing for...

9.8CVSS7.7AI score0.01785EPSS
SaveExploits5References6
SUSE CVE
SUSE CVE
added 2023/02/15 6:14 a.m.8 views

SUSE CVE-2006-3668

Heap-based buffer overflow in the itreadenvelope function in Dynamic Universal Music Bibliotheque DUMB 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" Impulse Tracker file with an envelope with a large numbe...

7.6CVSS8.2AI score0.10119EPSS
SaveExploits2References2
SUSE CVE
SUSE CVE
added 2023/02/15 6:05 a.m.8 views

SUSE CVE-2009-0179

libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers to cause a denial of service application crash by loading an XM file...

4.3CVSS6.9AI score0.01879EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:55 a.m.9 views

SUSE CVE-2016-9447

The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service out-of-bounds read or write and possibly execute arbitrary code via a crafted NSF music file...

7.8CVSS7.8AI score0.02839EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:54 a.m.10 views

SUSE CVE-2016-9957

Stack-based buffer overflow in game-music-emu before 0.6.1...

7.8CVSS7.5AI score0.01928EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:54 a.m.9 views

SUSE CVE-2016-9958

game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations...

7.8CVSS7.2AI score0.0233EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:54 a.m.9 views

SUSE CVE-2016-9960

game-music-emu before 0.6.1 allows local users to cause a denial of service divide by zero and process crash...

5.5CVSS6.4AI score0.0053EPSS
SaveExploits1References5
Rows per page
Query Builder