Skip to content
OpenAdvisories

Vendor

PHPSUGAR

4 known vulnerabilities.

Products

PHP Melody 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2021-47915

    PHP Melody 3.0 SQL Injection Vulnerability via Edit Video Parameter

    PHP Melody version 3.0 contains a remote SQL injection vulnerability in the video edit module that allows authenticated attackers to inject malicious SQL commands. Attackers can exploit the unvalidated 'vid' parameter to execute arbitrary database queries and…

    PHPSUGAR PHP Melody