Vendor
ampache
19 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Critical 9.3
Cross-site Scripting (XSS) - Reflected in ampache/ampache
Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7.
-
Critical 9.1
Unauthenticated SubSonic backend access in Ampache
Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic API. To successfully make the attack you must use a username that is not part of the site to bypass t…