CVE-2024-2930

CVE-2024-2930 affects SourceCodester Music Gallery Site 1.0. The vulnerability exists in the file classes/Master.php?f=save_music and leads to unrestricted, remote file upload. Exploitation details are publicly disclosed. No fixed version is provided in the documents; remediation guidance in conn...

CVE-2024-8221

CVE-2024-8221 affects SourceCodester Music Gallery Site 1.0. The vulnerability is an SQL injection in the /admin/categories/manage_category.php file caused by manipulating the id parameter. It is exploitable remotely and is described as critical in multiple sources. Some documents also suggest a ...

CVE-2024-8336

CVE-2024-8336 affects SourceCodester Music Gallery Site 1.0. The vulnerability is a SQL injection in an unknown function at /php-music/classes/Master.php?f=delete_music where the id parameter is manipulated, and the issue can be exploited remotely. The exploit has been disclosed publicly. Multipl...

CVE-2024-8345

The CVE-2024-8345 entry relates to SourceCodester Music Gallery Site 1.0 where the vulnerability exists in the delete path for Users.php (parameter f=delete). The root cause is a SQL injection caused by unsafely handling the id argument, allowing remote exploitation and potentially affecting conf...

CVE-2024-8223

CVE-2024-8223 affects SourceCodester Music Gallery Site 1.0. The vulnerability exists in the file /classes/Master.php?f=delete_category where the manipulation of the argument id leads to an SQL injection. The issue is exploitable remotely and the exploit has been disclosed publicly. Impact detail...

CVE-2024-8222

CVE-2024-8222 affects SourceCodester Music Gallery Site 1.0. The vulnerability is a SQL injection in the endpoint /admin/?page=musics/manage_music caused by manipulation of the id parameter, enabling remote exploitation. Public exploits are referenced in the initial records. Impact is described a...