7 matches found
EUVD-2017-6550
Malware in sbrugna...
Sql injection
In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php...
CVE-2017-15081
In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php...
CVE-2017-15081
In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php...
CVE-2017-15081
CVE-2017-15081 : In PHPSUGAR PHP Melody CMS 2.6.1, there is a SQL Injection in the parameter playlist of playlists.php. The vulnerability is demonstrated in public exploit listings (e.g., payloads showing UNION-based injections) and CNVD/CVE records describe that an attacker can inject SQL to acc...
CVE-2017-15081: Improper Neutralization of Special Elements used in an SQL Command
In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php...
PT-2017-13861
Name of the Vulnerable Software and Affected Versions PHPSUGAR PHP Melody CMS version 2.6.1 Description SQL Injection exists in the system, allowing unauthorized access to database information. The issue is specifically related to the playlist parameter in the "playlists.php" endpoint...