CVE-2017-15648

Description

References

• phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release · Release Notes
• blogs.securiteam.com/index.php/archives/3464 · Exploit

php melody 的其他漏洞

• CVE-2021-47915高危 8.8PHP Melody version 3.0 contains a remote SQL injection vulnerability in the video edit module that allows authenticated attackers to inject …
• CVE-2021-47914中危 5.4PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote…
• CVE-2021-47913中危 5.4PHP Melody 3.0 contains a persistent cross-site scripting vulnerability in the video editor that allows privileged users to inject malicious…
• CVE-2021-47912中危 5.4PHP Melody version 3.0 contains multiple non-persistent cross-site scripting vulnerabilities in categories, import, and user import files. A…
• CVE-2018-5211严重 9.8PHP Melody version 2.7.1 suffer from SQL Injection Time-based attack on the page ajax.php with the parameter playlist.