Ampache vulnerabilities

Products

• Ampache 25
• Ampache/ampache 3

Newest

• ampache Insufficient Validation in Controllers (Activation/Deactivation) in Ampache CVE-2024-51484 5.3 MediumNovember 11, 2024
• ampache Insufficient Validation in Plugins (Activation/Deactivation) in Ampache CVE-2024-51485 5.3 MediumNovember 11, 2024
• ampache Stored Cross-Site Scripting in Ampache CVE-2024-51486 5.5 MediumNovember 11, 2024
• ampache Insufficient Validation in Catalog (Activation/Deactivation) in Ampache CVE-2024-51487 5.3 MediumNovember 11, 2024
• ampache Insufficient Validation in Delete Message in Ampache CVE-2024-51488 5.3 MediumNovember 11, 2024
• ampache Insufficient Message Token Validation in Ampache CVE-2024-51489 5.3 MediumNovember 11, 2024
• ampache Stored Cross-Site Scripting in Ampache CVE-2024-51490 5.5 MediumNovember 11, 2024
• ampache Cross-Site Request Forgery in ampache CVE-2024-47828 5.3 MediumOctober 9, 2024
• ampache Ampache vulnerable to Stored XSS via Democratic Playlist Name CVE-2024-47184 6.1 MediumSeptember 27, 2024
• ampache Ampache Stored Cross-site Scripting Vulnerability CVE-2024-41665 5.5 MediumJuly 23, 2024
• ampache Ampache has multiple reflective XSS vulnerabilities CVE-2024-28852 6.1 MediumMarch 27, 2024
• ampache Ampache Stored XSS CVE-2024-28853 3.9 LowMarch 27, 2024
• ampache, ampache ampache/ampache +1 more SQL Injection in ampache/ampache CVE-2023-0771 7.2 HighFebruary 10, 2023
• ampache, ampache ampache/ampache +1 more Cross-site Scripting (XSS) - Reflected in ampache/ampache CVE-2023-0606 9.3 CriticalFebruary 1, 2023
• ampache, ampache ampache/ampache +1 more Unrestricted Upload of File with Dangerous Type in ampache/ampache CVE-2022-4665 3.1 LowDecember 23, 2022
• ampache Cross-site Scripting in Random.php CVE-2021-32644 Public exploit 6.4 MediumJune 22, 2021
• ampache Unauthenticated SQL injection in Ampache CVE-2020-15153 8.2 HighApril 30, 2021
• ampache Unauthenticated SubSonic backend access in Ampache CVE-2021-21399 9.1 CriticalApril 13, 2021
• ampache An issue was discovered in Ampache through 3.9.1. A stored XSS exists in the localplay.php... CVE-2019-12386 Fix available 5.4 MediumAugust 22, 2019
• ampache An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL... CVE-2019-12385 Fix available 8.8 HighAugust 22, 2019
• ampache Ampache 3.8.3 allows PHP Object Instantiation via democratic.ajax.php and democratic.class.php. CVE-2017-18375 8.8 HighMay 24, 2019
• ampache gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink... CVE-2008-3929 7.2 HighSeptember 4, 2008
• ampache Session fixation vulnerability in Ampache before 3.3.3.5 allows remote attackers to hijack web... CVE-2007-4438 6.8 MediumAugust 20, 2007
• ampache SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to... CVE-2007-4437 6.8 MediumAugust 20, 2007
• ampache Unspecified vulnerability in Ampache 3.3.2 and earlier, when register_globals is enabled, allows... CVE-2006-5668 7.5 HighNovember 3, 2006