Lucene search
+L

9 matches found

EUVD
EUVD
•added 2026/04/16 12:00 a.m.•14 views

EUVD-2026-23252

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewuser.php...

9.4CVSS5.9AI score0.00411EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/16 12:00 a.m.•6 views

CVE-2026-37338

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/viewuser.php...

5.9AI score0.00411EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2019-7348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username'...

6.1CVSS6.6AI score0.00769EPSS
SaveExploits1References2
OSV
OSV
•added 2024/09/16 8:15 p.m.•17 views

CVE-2024-42795

An Incorrect Access Control vulnerability was found in /music/viewuser.php?id=3 and /music/controller.php?page=edituser&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to view valid user details...

4.2CVSS5.8AI score0.00221EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/08/21 12:00 a.m.•17 views

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. A SQL injection vulnerability exists in Kashipara Music Management System v1.0, which originates from the lack of validation of the "id" parameter of /music/viewuser.php against external SQL input, and can be exploited...

8.8CVSS8.1AI score0.00569EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/08/21 12:00 a.m.•15 views

PT-2024-30158 · Unknown · Kashipara Music Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: A SQL injection issue in the "/music/view user.php" endpoint allows an attacker to execute arbitrary SQL commands via the id parameter of the View User Profile Page. This could...

8.8CVSS8.2AI score0.00569EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/24 12:00 a.m.•3 views

CVE-2020-14018: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Navigate CMS 2.9 r1433. There is a stored XSS vulnerability that is executed on the page to view users, and on the page to edit users. This is present in both the User field and the E-Mail field. On the Edit user page, the XSS is only triggered via the E-Mail field;...

6.1CVSS5.8AI score0.00934EPSS
SaveExploits1References2
OSV
OSV
•added 2019/02/04 7:29 p.m.•38 views

DEBIAN-CVE-2019-7348

Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username' parameter value in the view user user.php because proper filtration is omitted...

6.1CVSS5.6AI score0.00769EPSS
SaveExploits1References1
OSV
OSV
•added 2019/02/04 7:29 p.m.•12 views

UBUNTU-CVE-2019-7348

Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username' parameter value in the view user user.php because proper filtration is omitted...

6.1CVSS6.9AI score0.00769EPSS
SaveExploits1References3
Rows per page
Query Builder