CVE-2019-12385

An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL Injection, so any user able to perform lib/class/search.class.php searches even guest users can dump any data contained in the database sessions, hashed passwords, etc.. This may lead to a full compromise of...

PT-2019-12774

Name of the Vulnerable Software and Affected Versions Ampache versions through 3.9.1 Description An issue in the search engine allows for SQL Injection, enabling any user, including guest users, to extract data from the database, such as sessions and hashed passwords. This could lead to the...