Lucene search
+L

14 matches found

NVD
NVD
•added 2026/09/29 3:17 p.m.•5 views

CVE-2026-102569

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the admin video edit function where the videoid parameter is concatenated into an UPDATE statement without proper escaping. An authenticated administrator with videomoderation permission can inject arbitrar...

7CVSS0.00237EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/29 2:22 p.m.•34 views

CVE-2026-102569 ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid Parameter

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the admin video edit function where the videoid parameter is concatenated into an UPDATE statement without proper escaping. An authenticated administrator with videomoderation permission can inject arbitrar...

7CVSS0.00237EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/29 2:22 p.m.•10 views

CVE-2026-102569

The ClipBucket application (versions v5 through 5.5.3-#197 ) contains a time-based blind SQL injection vulnerability within the admin video edit function. The root cause is the lack of proper escaping when the videoid parameter is concatenated into an UPDATE statement. An authenticated administra...

7CVSS6.1AI score0.00237EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/29 2:22 p.m.•6 views

EUVD-2026-88970

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the admin video edit function where the videoid parameter is concatenated into an UPDATE statement without proper escaping. An authenticated administrator with videomoderation permission can inject arbitrar...

7CVSS6.1AI score0.00237EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/29 2:22 p.m.•4 views

CVE-2026-102569 ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid Parameter

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the admin video edit function where the videoid parameter is concatenated into an UPDATE statement without proper escaping. An authenticated administrator with videomoderation permission can inject arbitrar...

7CVSS6AI score
SaveExploits0References7
NVD
NVD
•added 2026/02/01 1:15 p.m.•17 views

CVE-2021-47915

PHP Melody version 3.0 contains a remote SQL injection vulnerability in the video edit module that allows authenticated attackers to inject malicious SQL commands. Attackers can exploit the unvalidated 'vid' parameter to execute arbitrary database queries and potentially compromise the web...

8.8CVSS0.00593EPSS
SaveExploits1References4
OSV
OSV
•added 2026/02/01 1:15 p.m.•14 views

CVE-2021-47915

PHP Melody version 3.0 contains a remote SQL injection vulnerability in the video edit module that allows authenticated attackers to inject malicious SQL commands. Attackers can exploit the unvalidated 'vid' parameter to execute arbitrary database queries and potentially compromise the web...

8.8CVSS6AI score0.00593EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/02/01 12:15 p.m.•11 views

CVE-2021-47915

PHP Melody version 3.0 contains a remote SQL injection vulnerability in the video edit module that allows authenticated attackers to inject malicious SQL commands. Attackers can exploit the unvalidated 'vid' parameter to execute arbitrary database queries and potentially compromise the web...

8.6CVSS6.2AI score0.00593EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
•added 2026/02/01 12:15 p.m.•19 views

EUVD-2021-34756

PHP Melody version 3.0 contains a remote SQL injection vulnerability in the video edit module that allows authenticated attackers to inject malicious SQL commands. Attackers can exploit the unvalidated 'vid' parameter to execute arbitrary database queries and potentially compromise the web...

8.6CVSS6.2AI score0.00593EPSS
SaveExploits1References4
CVE
CVE
•added 2026/02/01 12:15 p.m.•27 views

CVE-2021-47915

Summary: CVE-2021-47915 affects PHP Melody 3.0, where the video edit module accepts an unvalidated vid parameter, enabling authenticated users to perform a remote SQL injection. This can lead to arbitrary database queries and potential compromise of the web app and its database management system....

8.8CVSS6.2AI score0.00593EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2026/02/01 12:15 p.m.•50 views

CVE-2021-47915 PHP Melody 3.0 SQL Injection Vulnerability via Edit Video Parameter

PHP Melody version 3.0 contains a remote SQL injection vulnerability in the video edit module that allows authenticated attackers to inject malicious SQL commands. Attackers can exploit the unvalidated 'vid' parameter to execute arbitrary database queries and potentially compromise the web...

8.6CVSS0.00593EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/01 12:00 a.m.•1 views

CVE-2021-47915: Improper Neutralization of Special Elements used in an SQL Command

PHP Melody version 3.0 contains a remote SQL injection vulnerability in the video edit module that allows authenticated attackers to inject malicious SQL commands. Attackers can exploit the unvalidated 'vid' parameter to execute arbitrary database queries and potentially compromise the web...

8.8CVSS6.4AI score0.00593EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/02/01 12:00 a.m.•16 views

PT-2026-5560

Name of the Vulnerable Software and Affected Versions PHP Melody version 3.0 Description PHP Melody version 3.0 has a remote SQL injection issue in the video edit module. Authenticated attackers can inject malicious SQL commands through the unvalidated vid parameter. Successful exploitation allow...

8.6CVSS6.1AI score0.00593EPSS
SaveExploits1References9
hackapp
hackapp
•added 2016/04/01 9:10 a.m.•16 views

MiniMovie-Slideshow Video Edit - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MiniMovie-Slideshow Video Edit published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder