Lucene search
K

5 matches found

NVD
NVD
added 2025/09/12 10:15 p.m.15 views

CVE-2025-10328

A security vulnerability has been detected in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this issue is some unknown functionality of the file /htdocs/api/playlist/playsinglefile.php. The manipulation of the argument File leads to os command injection. The attack may be initiated remotely...

9.8CVSS0.09438EPSS
Exploits1References4
OSV
OSV
added 2025/09/12 9:32 p.m.5 views

CVE-2025-10328 MiczFlor RPi-Jukebox-RFID playsinglefile.php os command injection

A security vulnerability has been detected in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this issue is some unknown functionality of the file /htdocs/api/playlist/playsinglefile.php. The manipulation of the argument File leads to os command injection. The attack may be initiated remotely...

5.3CVSS6.2AI score0.09438EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/09/12 9:32 p.m.4 views

CVE-2025-10328 MiczFlor RPi-Jukebox-RFID playsinglefile.php os command injection

A security vulnerability has been detected in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this issue is some unknown functionality of the file /htdocs/api/playlist/playsinglefile.php. The manipulation of the argument File leads to os command injection. The attack may be initiated remotely...

6.5CVSS6.5AI score0.09438EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/09/12 9:32 p.m.15 views

CVE-2025-10328 MiczFlor RPi-Jukebox-RFID playsinglefile.php os command injection

A security vulnerability has been detected in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this issue is some unknown functionality of the file /htdocs/api/playlist/playsinglefile.php. The manipulation of the argument File leads to os command injection. The attack may be initiated remotely...

6.5CVSS0.09438EPSS
Exploits1References4
CVE
CVE
added 2025/09/12 9:32 p.m.27 views

CVE-2025-10328

CVE-2025-10328 affects MiczFlor RPi-Jukebox-RFID versions up to 2.8.0. The vulnerability stems from improper handling of the File argument in the file /htdocs/api/playlist/playsinglefile.php , enabling os command injection. The issue can be exploited remotely and has been publicly disclosed. Mult...

9.8CVSS6.5AI score0.09438EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder