299 matches found
Ampache <= 3.5.4 Reflected XSS Vulnerability - Active Check
Ampache is prone to a reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ampache 3.5.4 Cross Site Scripting
------------------------------------------------------------------------ --Description-- A reflected cross-site scripting vulnerability in Ampache 3.5.4 can be exploited to execute arbitrary JavaScript. --PoC-- alert0" /...
Ampache 3.5.4 - login.php Cross-Site Scripting
Ampache 3.5.4 - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47756/info Ampache is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...
Ampache 3.5.4 - 'login.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/47756/info Ampache is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...
ampache Script Authentication Bypass
Exploit for php platform in category web applications ==================================== ampache Script Authentication Bypass ==================================== Date: 18/07/2010 Author: walid Software Link: null Version: null Tested on: Windows CVE: null Found By: WaLiD E-mail:...
Ampache 3.4.3 - login.php Multiple SQL Injections
Ampache 3.4.3 - login.php Multiple SQL Injections source: https://www.securityfocus.com/bid/37417/info Ampache is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
Ampache 3.4.3 - 'login.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/37417/info Ampache is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...
FreeBSD Ports: ampache
The remote host is missing an update to the system as announced in the referenced advisory. VID 0ac68e68-d32b-11dd-b540-d1288664c17e OpenVAS Vulnerability Test $ Description: Auto generated from VID 0ac68e68-d32b-11dd-b540-d1288664c17e Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: ampache
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD : ampache -- insecure temporary file usage (0ac68e68-d32b-11dd-b540-d1288664c17e)
Secunia reports : A security issue has been reported in Ampache, which can be exploited by malicious, local users to perform certain actions with escalated privileges. The security issue is caused due to the 'gather-messages.sh' script handling temporary files in an insecure manner. This can be...
Gentoo Security Advisory GLSA 200812-22 (ampache)
The remote host is missing updates announced in advisory GLSA 200812-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200812-22 (ampache)
The remote host is missing updates announced in advisory GLSA 200812-22. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-200812-22 : Ampache: Insecure temporary file usage
The remote host is affected by the vulnerability described in GLSA-200812-22 Ampache: Insecure temporary file usage Dmitry E. Oboukhov reported an insecure temporary file usage within the gather-messages.sh script. Impact : A local attacker could perform symlink attacks to overwrite arbitrary fil...
ampache -- insecure temporary file usage
Secunia reports: A security issue has been reported in Ampache, which can be exploited by malicious, local users to perform certain actions with escalated privileges. The security issue is caused due to the "gather-messages.sh" script handling temporary files in an insecure manner. This can be...
Ampache: Insecure temporary file usage
Background Ampache is a PHP based tool for managing, updating and playing audio files via a web interface. Description Dmitry E. Oboukhov reported an insecure temporary file usage within the gather-messages.sh script. Impact A local attacker could perform symlink attacks to overwrite arbitrary...
Gentoo Security Advisory GLSA 200710-13 (ampache)
The remote host is missing updates announced in advisory GLSA 200710-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200710-13 (ampache)
The remote host is missing updates announced in advisory GLSA 200710-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Arbitrary file deletion
gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file...
