Lucene search
+L

143 matches found

Exploit DB
Exploit DB
added 2017/10/28 12:00 a.m.72 views

PHP Melody 2.6.1 - SQL Injection

Author : Venkat Rajgor + Email : [email protected] + Vulnerability : SQL injection E-mail ID : [email protected] Download : http://www.phpsugar.com Web : http://www.phpsugar.com Price : $39 USD Vulnerable parameter: http://x.x.x.x/playlists.php?playlist= Application : PHPSUGAR PHP Melody...

9.8CVSS8.5AI score0.02407EPSS
SaveExploits3
exploitpack
exploitpack
added 2017/10/28 12:00 a.m.21 views

PHP Melody 2.6.1 - SQL Injection

PHP Melody 2.6.1 - SQL Injection + Author : Venkat Rajgor + Email : [email protected] + Vulnerability : SQL injection E-mail ID : [email protected] Download : http://www.phpsugar.com Web : http://www.phpsugar.com Price : $39 USD Vulnerable parameter: http://x.x.x.x/playlists.php?playlist=...

0.5AI score
SaveExploits0
CNVD
CNVD
added 2017/10/27 12:00 a.m.33 views

PHPSUGAR PHP Melody SQL Injection Vulnerability (CNVD-2017-32539)

PHPSUGAR PHP Melody is a PHP-based content management system for video websites. A SQL injection vulnerability exists in PHPSUGAR PHP Melody versions prior to 2.7.3. A remote attacker can exploit this vulnerability by sending the 'image' parameter to the admin/editcategory.php file to inject SQL...

8.8CVSS9.2AI score0.01337EPSS
SaveExploits3References1
CNVD
CNVD
added 2017/10/27 12:00 a.m.44 views

PHPSUGAR PHP Melody SQL Injection Vulnerability (CNVD-2017-32540)

PHPSUGAR PHP Melody is a PHP-based content management system for video websites. A SQL injection vulnerability exists in PHPSUGAR PHP Melody versions prior to 2.7.3. A remote attacker can perform a display list operation on the watch.php file and exploit the vulnerability to execute arbitrary SQL...

9.8CVSS10AI score0.01485EPSS
SaveExploits3References1
zdt
zdt
added 2017/10/25 12:00 a.m.55 views

PHP Melody 2.6.1 SQL Injection Vulnerability

Exploit for php platform in category web applications --------------------------------------------------- PHP Melody 2.6.1 SQL Injection --------------------------------------------------- + Author : Venkat Rajgor + Email : email protected + Vulnerability : SQL injection ---------info...

7.5CVSS9.2AI score0.02407EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2017/10/25 12:00 a.m.52 views

PHP Melody 2.6.1 SQL Injection

--------------------------------------------------- PHP Melody 2.6.1 SQL Injection --------------------------------------------------- + Author : Venkat Rajgor + Email : [email protected] + Vulnerability : SQL injection ---------info Cms---------------- name : PHP Melody version 2.6.1 email :...

7.1AI score
SaveExploits0
OSV
OSV
added 2017/10/24 6:29 a.m.7 views

CVE-2017-15081

In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php...

9.8CVSS5.8AI score0.02407EPSS
SaveExploits3References3
NVD
NVD
added 2017/10/24 6:29 a.m.27 views

CVE-2017-15081

In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php...

9.8CVSS9.9AI score0.02407EPSS
SaveExploits3References3
Prion
Prion
added 2017/10/24 6:29 a.m.16 views

Sql injection

In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php...

7.5CVSS9.8AI score0.02407EPSS
SaveExploits3References3Affected Software1
CVE
CVE
added 2017/10/24 6:00 a.m.59 views

CVE-2017-15081

CVE-2017-15081 : In PHPSUGAR PHP Melody CMS 2.6.1, there is a SQL Injection in the parameter playlist of playlists.php. The vulnerability is demonstrated in public exploit listings (e.g., payloads showing UNION-based injections) and CNVD/CVE records describe that an attacker can inject SQL to acc...

9.8CVSS9.8AI score0.02407EPSS
SaveExploits3References3Affected Software1
CNVD
CNVD
added 2017/10/20 12:00 a.m.8 views

PHP Melody Cross-Site Scripting Vulnerability

PHP Melody is a self-hosted video CMS. A cross-site scripting vulnerability exists in PHP Melody versions prior to 2.7.3, which can be exploited by remote attackers to inject arbitrary web script or HTML...

6.1CVSS6.2AI score0.00661EPSS
SaveExploits1References1
Prion
Prion
added 2017/10/19 10:29 p.m.18 views

Code injection

In PHPSUGAR PHP Melody before 2.7.3, pagemanager.php has XSS via the pagetitle parameter...

4.3CVSS6AI score0.00661EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2017/10/19 10:29 p.m.19 views

CVE-2017-15648

In PHPSUGAR PHP Melody before 2.7.3, pagemanager.php has XSS via the pagetitle parameter...

6.1CVSS6.1AI score0.00661EPSS
SaveExploits1References2
OSV
OSV
added 2017/10/19 10:29 p.m.6 views

CVE-2017-15648

In PHPSUGAR PHP Melody before 2.7.3, pagemanager.php has XSS via the pagetitle parameter...

6.1CVSS5.8AI score0.00661EPSS
SaveExploits1References2
CVE
CVE
added 2017/10/19 10:00 p.m.53 views

CVE-2017-15648

CVE-2017-15648 : In PHPSUGAR PHP Melody before 2.7.3, the file page_manager.php is vulnerable to XSS via the page_title parameter . Affected software: PHPSUGAR PHP Melody versions preceding 2.7.3. Root cause: improper handling/escaping of user-supplied input in page_title leading to script inject...

6.1CVSS6AI score0.00661EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2017/10/19 10:00 p.m.26 views

CVE-2017-15648

In PHPSUGAR PHP Melody before 2.7.3, pagemanager.php has XSS via the pagetitle parameter...

6.1AI score0.00661EPSS
SaveExploits1References2
Prion
Prion
added 2017/10/18 2:29 a.m.17 views

Sql injection

In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aapagesperpage cookie in a playlist action to watch.php...

7.5CVSS9.8AI score0.01485EPSS
SaveExploits3References2Affected Software1
Prion
Prion
added 2017/10/18 2:29 a.m.13 views

Sql injection

In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/editcategory.php...

6CVSS9.4AI score0.01337EPSS
SaveExploits3References2Affected Software1
OSV
OSV
added 2017/10/18 2:29 a.m.6 views

CVE-2017-15579

In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aapagesperpage cookie in a playlist action to watch.php...

9.8CVSS5.8AI score0.01485EPSS
SaveExploits3References2
OSV
OSV
added 2017/10/18 2:29 a.m.9 views

CVE-2017-15578

In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/editcategory.php...

8.8CVSS5.8AI score0.01337EPSS
SaveExploits3References2
Rows per page
Query Builder