Sql injection

In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php...

CVE-2017-15081

In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php...

CVE-2017-15081: Improper Neutralization of Special Elements used in an SQL Command

In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php...

PT-2017-13861

Name of the Vulnerable Software and Affected Versions PHPSUGAR PHP Melody CMS version 2.6.1 Description SQL Injection exists in the system, allowing unauthorized access to database information. The issue is specifically related to the playlist parameter in the "playlists.php" endpoint...

CVE-2017-15648

In PHPSUGAR PHP Melody before 2.7.3, pagemanager.php has XSS via the pagetitle parameter...

CVE-2017-15648

In PHPSUGAR PHP Melody before 2.7.3, pagemanager.php has XSS via the pagetitle parameter...

PT-2017-14140

Name of the Vulnerable Software and Affected Versions PHPSUGAR PHP Melody versions prior to 2.7.3 Description The issue concerns an XSS vulnerability via the page title parameter in the page manager.php file. Recommendations For versions prior to 2.7.3, update to version 2.7.3 or later to resolve...

CVE-2017-15648: Improper Neutralization of Input During Web Page Generation

In PHPSUGAR PHP Melody before 2.7.3, pagemanager.php has XSS via the pagetitle parameter...

CVE-2017-15579

In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aapagesperpage cookie in a playlist action to watch.php...

PT-2017-14110

Name of the Vulnerable Software and Affected Versions PHPSUGAR PHP Melody versions prior to 2.7.3 Description The issue exists due to SQL Injection via an aa pages per page cookie in a playlist action to "watch.php". Recommendations For versions prior to 2.7.3, update to version 2.7.3 or later to...

PT-2017-14109

Name of the Vulnerable Software and Affected Versions PHPSUGAR PHP Melody versions prior to 2.7.3 Description The issue exists due to SQL Injection via the image parameter to the "admin/edit category.php" endpoint. Recommendations For versions prior to 2.7.3, update to version 2.7.3 or later to...

CVE-2017-15579: Improper Neutralization of Special Elements used in an SQL Command

In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aapagesperpage cookie in a playlist action to watch.php...

CVE-2017-15578: Improper Neutralization of Special Elements used in an SQL Command

In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/editcategory.php...