Lucene search
PhpsugarPhp Melody
4 matches found
CVE-2017-15578
In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php.
8.8CVSS9.7AI score0.002EPSS
CVE-2017-15579
In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.php.
9.8CVSS9.8AI score0.00376EPSS
CVE-2017-15081
In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.
9.8CVSS9.8AI score0.07326EPSS
CVE-2017-15648
In PHPSUGAR PHP Melody before 2.7.3, page_manager.php has XSS via the page_title parameter.
6.1CVSS6AI score0.00301EPSS