CVE-2021-47913

概要

参考情報

• phpsugar.com/blog/2021/09/php-melody-3-0-vulnerability-report-fix · Vendor Advisory
• phpsugar.com/phpmelody.html · Product
• vulncheck.com/advisories/php-melody-persistent-cross-site-scripting-via-video-editor · Third Party Advisory
• vulnerability-lab.com/get_content.php · Exploit

php melody のその他の脆弱性

• CVE-2021-47915高 8.8PHP Melody version 3.0 contains a remote SQL injection vulnerability in the video edit module that allows authenticated attackers to inject …
• CVE-2021-47914中 5.4PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote…
• CVE-2021-47912中 5.4PHP Melody version 3.0 contains multiple non-persistent cross-site scripting vulnerabilities in categories, import, and user import files. A…
• CVE-2018-5211緊急 9.8PHP Melody version 2.7.1 suffer from SQL Injection Time-based attack on the page ajax.php with the parameter playlist.
• CVE-2017-15081緊急 9.8In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.