375 matches found
CVE-2021-32644
CVE-2021-32644 This vulnerability is an XSS vulnerability that affected versions prior to Ampache 4.4.3. https://nvd.nist.gov/vuln/detail/CVE-2021-32644 Installation and Execution Steps 1. Install Ampache When installing, please configure port forwarding in the docker-compose.yml file. The...
Linux Distros Unpatched Vulnerability : CVE-2026-125395
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights to inject script through unescaped song lyrics in...
EUVD-2026-120558
Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights to inject script through unescaped song lyrics in LyricsView.php getLyrics and showlyrics.inc.php. Attackers can upload a song whose lyrics ID3 tag contains HTML and script to execute co...
CVE-2026-125395
Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights to inject script through unescaped song lyrics in LyricsView.php getLyrics and showlyrics.inc.php. Attackers can upload a song whose lyrics ID3 tag contains HTML and script to execute co...
CVE-2026-125395: ampache: Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights to…
Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights to inject script through unescaped song lyrics in LyricsView.php getLyrics and showlyrics.inc.php. Attackers can upload a song whose lyrics ID3 tag contains HTML and script to execute co...
UBUNTU-CVE-2026-125395
Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights to inject script through unescaped song lyrics in LyricsView.php getLyrics and showlyrics.inc.php. Attackers can upload a song whose lyrics ID3 tag contains HTML and script to execute co...
CVE-2026-125395
Ampache versions before 8.4.0 are vulnerable to a stored cross-site scripting (XSS) flaw. The issue resides in the LyricsView.php getLyrics() function and show_lyrics.inc.php , where song lyrics are not properly escaped. An attacker with upload rights can inject malicious HTML and scripts into th...
CVE-2026-125395 Ampache before 8.4.0 Stored XSS via Song Lyrics ID3 Tag
Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights to inject script through unescaped song lyrics in LyricsView.php getLyrics and showlyrics.inc.php. Attackers can upload a song whose lyrics ID3 tag contains HTML and script to execute co...
CVE-2026-125395 Ampache before 8.4.0 Stored XSS via Song Lyrics ID3 Tag
Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights to inject script through unescaped song lyrics in LyricsView.php getLyrics and showlyrics.inc.php. Attackers can upload a song whose lyrics ID3 tag contains HTML and script to execute co...
CVE-2026-125395 Ampache before 8.4.0 Stored XSS via Song Lyrics ID3 Tag
Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights to inject script through unescaped song lyrics in LyricsView.php getLyrics and showlyrics.inc.php. Attackers can upload a song whose lyrics ID3 tag contains HTML and script to execute co...
PT-2026-141218
Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights to inject script through unescaped song lyrics in LyricsView.php getLyrics and show lyrics.inc.php. Attackers can upload a song whose lyrics ID3 tag contains HTML and script to execute...
Ampache Login Panel - Detect
Ampache login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ampache login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ampache Login Panel - Detect', 'description': 'Ampache...
Ampache Debug Page Detection
Detects Ampache Debug Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Ampache Debug Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ampache Debug Page Detection', 'description': 'Detects Ampache Debu...
Ampache Music Installer Detection
Ampache Music is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Ampache Music is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import...
Ampache Update Page Exposure Detection
Ampache update page is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ampache update page is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ampache Update Page Exposure Detection', 'description':...
CVE-2017-18375
Ampache 3.8.3 allows PHP Object Instantiation via democratic.ajax.php and democratic.class.php...
CVE-2024-41665
Ampache, a web based audio/video streaming application and file manager, has a stored cross-site scripting XSS vulnerability in versions prior to 6.6.0. This vulnerability exists in the "Playlists - Democratic - Configure Democratic Playlist" feature. An attacker with Content Manager permissions...
EUVD-2019-4020
Malware in sbrugna...