CVE-2017-15578

PHPSUGAR PHP Melody (pre-2.7.3) is affected by a SQL Injection in admin/edit_category.php via the image parameter. The CVE-2017-15578 entry is supported by multiple sources (CNVD/CVELIST/NVD) stating that versions prior to 2.7.3 are vulnerable and that exploitation can inject SQL data. The vulner...

CVE-2021-47915

Summary: CVE-2021-47915 affects PHP Melody 3.0, where the video edit module accepts an unvalidated vid parameter, enabling authenticated users to perform a remote SQL injection. This can lead to arbitrary database queries and potential compromise of the web app and its database management system....