RSS   Vulnerabilities for 'Php melody'   RSS

2018-01-09
 
CVE-2018-5211

CWE-89
 
 
PHP Melody version 2.7.1 suffer from SQL Injection Time-based attack on the page ajax.php with the parameter playlist.

 
2017-10-24
 
CVE-2017-15081

CWE-89
 
 
In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.

 
2017-10-19
 
CVE-2017-15648

 
 
In PHPSUGAR PHP Melody before 2.7.3, page_manager.php has XSS via the page_title parameter.

 
2017-10-17
 
CVE-2017-15579

 
 
In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.php.

 
 
CVE-2017-15578

 
 
In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php.

 

 >>> Vendor: Phpsugar 2 Products
Ultimate regnow affiliate
Php melody

Copyright 2024, cxsecurity.com

 

Back to Top