Filtered by vendor Phpsugar Subscriptions
Filtered by product Php Melody Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-15648 1 Phpsugar 1 Php Melody 2024-09-16 N/A
In PHPSUGAR PHP Melody before 2.7.3, page_manager.php has XSS via the page_title parameter.
CVE-2017-15579 1 Phpsugar 1 Php Melody 2024-08-05 N/A
In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.php.
CVE-2017-15578 1 Phpsugar 1 Php Melody 2024-08-05 N/A
In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php.
CVE-2017-15081 1 Phpsugar 1 Php Melody 2024-08-05 N/A
In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.
CVE-2018-5211 1 Phpsugar 1 Php Melody 2024-08-05 N/A
PHP Melody version 2.7.1 suffer from SQL Injection Time-based attack on the page ajax.php with the parameter playlist.