PT-2024-34650

Name of the Vulnerable Software and Affected Versions Ampache versions prior to 7.0.1 Description Ampache is a web-based audio/video streaming application and file manager. The issue exists in the interface section of the Ampache menu, where users can change the "Custom URL - Favicon". This secti...

Ampache cross-site scripting vulnerability

Ampache is an open source web-based audio/video application and file manager from Ampache. A cross-site scripting vulnerability exists in Ampache version 7.0.1, which originates from a user being able to change the Custom URL - Logo in the interface section of the Ampache menu...

Ampache cross-site scripting vulnerability

Ampache is an open source web-based audio/video application and file manager from Ampache. A cross-site scripting vulnerability exists in Ampache version 7.0.1, which originates from a user being able to change the Custom URL - Favicon in the interface section of the Ampache menu...

CVE-2012-3001

Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability."...

Command injection

Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability."...

CVE-2012-3001

Mutiny Standard before 4.5-1.12 is vulnerable to a command-injection in the network-interface menu. An authenticated attacker can trigger arbitrary commands with root privileges via the admin interface; patches exist in 4.5-1.12 or newer. This is evidenced by multiple sources (NVD, CERT, OpenVAS,...

CVE-2012-3001: Improper Neutralization of Special Elements used in an OS Command

Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability."...

PT-2012-4425

Name of the Vulnerable Software and Affected Versions Mutiny Standard versions prior to 4.5-1.12 Description The issue allows remote attackers to execute arbitrary commands via the network-interface menu, related to a command injection vulnerability. Recommendations For versions prior to 4.5-1.12...