{"id":"CVE-2019-12385","aliases":["DLA-1988-1","EUVD-2019-4019","GHSA-p72w-3684-2crg","UBUNTU-CVE-2019-12385","USN-4693-1"],"status":"published","title":"An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL...","description":"An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL Injection, so any user able to perform lib/class/search.class.php searches (even guest users) can dump any data contained in the database (sessions, hashed passwords, etc.). This may lead to a full compromise of admin accounts, when combined with the weak password generator algorithm used in the lostpassword functionality.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01634,"percentile":0.76494,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-89"],"published":"2019-08-22T18:19:41Z","modified":"2026-06-17T02:14:32Z","fixes":[{"ecosystem":"Ubuntu:16.04:LTS","package":"ampache","fixed_in":["3.6-rzb2779+dfsg-0ubuntu9.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:8","package":"ampache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-rzb2752+dfsg-5+deb8u1"}]}],"versions":["3.6-rzb2752+dfsg-5"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ampache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-rzb2779+dfsg-0ubuntu9.2"}]}],"versions":["3.6-rzb2779+dfsg-0ubuntu5","3.6-rzb2779+dfsg-0ubuntu6","3.6-rzb2779+dfsg-0ubuntu7","3.6-rzb2779+dfsg-0ubuntu8","3.6-rzb2779+dfsg-0ubuntu9","3.6-rzb2779+dfsg-0ubuntu9.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ampache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-rzb2779+dfsg-0ubuntu9.2"}]}],"versions":["3.6-rzb2779+dfsg-0ubuntu5","3.6-rzb2779+dfsg-0ubuntu6","3.6-rzb2779+dfsg-0ubuntu7","3.6-rzb2779+dfsg-0ubuntu8","3.6-rzb2779+dfsg-0ubuntu9","3.6-rzb2779+dfsg-0ubuntu9.1"],"bundled":2}],"products":[{"vendor":"ampache","product":"ampache"}],"references":[{"url":"https://www.tarlogic.com/en/blog/vulnerabilities-in-ampache/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12385"},{"url":"https://www.tarlogic.com/en/blog/vulnerabilities-in-ampache"},{"url":"https://github.com/advisories/GHSA-p72w-3684-2crg"},{"url":"https://ubuntu.com/security/CVE-2019-12385","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4693-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12385","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12386","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-12385","description":"An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL Injection, so any user able to perform lib/class/search.class.php searches (even guest users) can dump any data contained in the database (sessions, hashed passwords, etc.). This may lead to a full compromise of admin accounts, when combined with the weak password generator algorithm used in the lostpassword functionality.","status":"published","published":"2019-08-22T18:19:41Z","modified":"2024-08-04T23:17:39.932Z","updated_at":"2026-11-02T14:20:24.025419Z"}],"euvd":[{"id":"EUVD-2019-4019","description":"An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL Injection, so any user able to perform lib/class/search.class.php searches (even guest users) can dump any data contained in the database (sessions, hashed passwords, etc.). This may lead to a full compromise of admin accounts, when combined with the weak password generator algorithm used in the lostpassword functionality.","status":"published","published":"2019-08-22T18:19:41Z","modified":"2024-08-04T23:17:39Z","updated_at":"2026-11-03T02:40:46.416719Z"}],"ghsa":[{"id":"GHSA-p72w-3684-2crg","title":"An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL...","description":"An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL Injection, so any user able to perform lib/class/search.class.php searches (even guest users) can dump any data contained in the database (sessions, hashed passwords, etc.). This may lead to a full compromise of admin accounts, when combined with the weak password generator algorithm used in the lostpassword functionality.","status":"published","published":"2022-05-24T16:54:33Z","modified":"2024-04-04T01:46:21Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:56:02.23917Z"}],"nvd":[{"id":"CVE-2019-12385","description":"An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL Injection, so any user able to perform lib/class/search.class.php searches (even guest users) can dump any data contained in the database (sessions, hashed passwords, etc.). This may lead to a full compromise of admin accounts, when combined with the weak password generator algorithm used in the lostpassword functionality.","status":"published","published":"2019-08-22T19:15:14.267Z","modified":"2026-06-17T02:14:32.487Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:05:23.725587Z"}],"osv":[{"id":"UBUNTU-CVE-2019-12385","description":"An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL Injection, so any user able to perform lib/class/search.class.php searches (even guest users) can dump any data contained in the database (sessions, hashed passwords, etc.). This may lead to a full compromise of admin accounts, when combined with the weak password generator algorithm used in the lostpassword functionality.","status":"published","published":"2019-08-22T19:15:00Z","modified":"2026-02-04T04:33:18.160464Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:19.202697Z"},{"id":"DLA-1988-1","title":"ampache - security update","status":"published","published":"2019-11-11T00:00:00Z","modified":"2026-03-09T01:18:33.491897Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"USN-4693-1","title":"ampache vulnerabilities","description":"It was discovered that an SQL injection vulnerability exists in the Ampache\nsearch engine. Any user able to perform searches could dump any data contained\nin the database. An attacker could use this to disclose sensitive information.\n(CVE-2019-12385)\n\nIt was discovered that an XSS vulnerability in Ampache. An attacker could use\nthis vulnerability to force an admin to create a new privileged user.\n(CVE-2019-12386)\n","status":"published","published":"2021-01-14T21:13:09Z","modified":"2026-02-10T04:42:02Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}