CVE-2021-47914

Mô tả

Tham khảo

• phpsugar.com/blog/2021/09/php-melody-3-0-vulnerability-report-fix · Vendor Advisory
• phpsugar.com/phpmelody.html · Product
• vulncheck.com/advisories/php-melody-persistent-xss-vulnerability-via-edit-video-parameter · Third Party Advisory
• vulnerability-lab.com/get_content.php · Exploit

Lỗ hổng khác của php melody

• CVE-2021-47915CAO 8.8PHP Melody version 3.0 contains a remote SQL injection vulnerability in the video edit module that allows authenticated attackers to inject …
• CVE-2021-47913TRUNG BÌNH 5.4PHP Melody 3.0 contains a persistent cross-site scripting vulnerability in the video editor that allows privileged users to inject malicious…
• CVE-2021-47912TRUNG BÌNH 5.4PHP Melody version 3.0 contains multiple non-persistent cross-site scripting vulnerabilities in categories, import, and user import files. A…
• CVE-2018-5211NGHIÊM TRỌNG 9.8PHP Melody version 2.7.1 suffer from SQL Injection Time-based attack on the page ajax.php with the parameter playlist.
• CVE-2017-15081NGHIÊM TRỌNG 9.8In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.