3 results · Clear filters · Feed
-
High 8.8
Cross Site Request Forgery (CSRF) vulnerability exists in the 'pvmsg.php?action=add_message', pvmsg.php?action=confirm_…
-
High 7.2
SQL Injection in ampache/ampache
SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop.
-
High 8.2
Unauthenticated SQL injection in Ampache
Ampache before version 4.2.2 allows unauthenticated users to perform SQL injection. Refer to the referenced GitHub Security Advisory for details and a workaround. This is fixed in version 4.2.2 and the development branch.