299 matches found
SUSE CVE-2007-4437
SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information...
SUSE CVE-2007-4438
Session fixation vulnerability in Ampache before 3.3.3.5 allows remote attackers to hijack web sessions via unspecified vectors...
CVE-2023-0771
SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...
Sql injection
SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...
CVE-2023-0771
SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...
UBUNTU-CVE-2023-0771
SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...
CVE-2023-0771 SQL Injection in ampache/ampache
SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...
Ampache SQL注入漏洞
Ampache is a web-based audio/video application and file manager. An SQL injection vulnerability exists in versions of ampache prior to 5.5.7. An attacker exploits this vulnerability to perform SQL injection attacks...
CVE-2023-0771 SQL Injection in ampache/ampache
SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop...
PT-2023-16517 · Ampache · Ampache
Name of the Vulnerable Software and Affected Versions: ampache/ampache versions prior to 5.5.7 Description: The issue is related to SQL Injection in the GitHub repository ampache/ampache. Recommendations: For versions prior to 5.5.7, update to version 5.5.7 or later to resolve the issue...
CVE-2023-0771
CVE-2023-0771 affects the Ampache project (ampache/ampache) prior to version 5.5.7. The issue is a SQL Injection in the web application, arising from the underlying code as described across multiple sources, with impact stated as high for confidentiality, integrity, and availability. The document...
Ampache Cross-Site Scripting Vulnerability (CNVD-2023-07918)
Ampache is a web-based audio/video application and file manager. cross-site scripting vulnerability exists in versions prior to Ampache 5.5.7, which stems from the fact that a user can insert malicious js in url-specific parameters and send links to other users, leading to a cross-site scripting...
UBUNTU-CVE-2023-0606
Cross-site Scripting XSS - Reflected in GitHub repository ampache/ampache prior to 5.5.7...
CVE-2023-0606 Cross-site Scripting (XSS) - Reflected in ampache/ampache
Cross-site Scripting XSS - Reflected in GitHub repository ampache/ampache prior to 5.5.7...
Ampache 跨站脚本漏洞
Ampache is a web-based audio/video application and file manager. cross-site scripting vulnerability exists in versions prior to Ampache 5.5.7, which stems from the fact that a user can insert malicious js in url-specific parameters and send links to other users, leading to a cross-site scripting...
CVE-2023-0606 Cross-site Scripting (XSS) - Reflected in ampache/ampache
Cross-site Scripting XSS - Reflected in GitHub repository ampache/ampache prior to 5.5.7...
CVE-2023-0606
CVE-2023-0606 is a reflected Cross-site Scripting (XSS) vulnerability in the Ampache web application, occurring in ampache/ampache prior to version 5.5.7. The issue arises from how URL-specific parameters can be manipulated to execute script in a victim’s browser. Several connected sources descri...
Reflected Cross Site Scripting
Description User can be input malicious js in param action in url http://localhost//stats.php?action=injecthere&userid=1 and send link to other user can be steal cookie of other user. Param action not input validation from user on line 71 in file...