Sourcefabric vulnerabilities

Products

• Rpi-jukebox-rfid 15
• Phoniebox 10
• Newscoop 6

Newest

• sourcefabric phoniebox An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi... CVE-2025-63951 7.5 HighDecember 18, 2025
• miczflor rpi-jukebox-rfid MiczFlor RPi-Jukebox-RFID userScripts.php cross site scripting CVE-2025-10370 Public exploit 5.1 MediumSeptember 13, 2025
• miczflor rpi-jukebox-rfid MiczFlor RPi-Jukebox-RFID cardRegisterNew.php cross site scripting CVE-2025-10369 5.1 MediumSeptember 13, 2025
• miczflor rpi-jukebox-rfid MiczFlor RPi-Jukebox-RFID manageFilesFolders.php cross site scripting CVE-2025-10368 5.1 MediumSeptember 13, 2025
• miczflor rpi-jukebox-rfid MiczFlor RPi-Jukebox-RFID cardEdit.php cross site scripting CVE-2025-10367 5.1 MediumSeptember 13, 2025
• miczflor rpi-jukebox-rfid MiczFlor RPi-Jukebox-RFID inc.setWlanIpMail.php cross site scripting CVE-2025-10366 5.1 MediumSeptember 13, 2025
• miczflor rpi-jukebox-rfid MiczFlor RPi-Jukebox-RFID playsinglefile.php os command injection CVE-2025-10328 5.3 MediumSeptember 12, 2025
• miczflor rpi-jukebox-rfid MiczFlor RPi-Jukebox-RFID shuffle.php os command injection CVE-2025-10327 Public exploit EPSS 10.2% 5.3 MediumSeptember 12, 2025
• miczflor rpi-jukebox-rfid MiczFlor RPi-Jukebox-RFID single.php os command injection CVE-2025-10326 5.3 MediumSeptember 12, 2025
• sourcefabric rpi-jukebox-rfid, phoniebox +1 more RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via... CVE-2024-41369 9.8 CriticalAugust 29, 2024
• sourcefabric rpi-jukebox-rfid, phoniebox +1 more RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via... CVE-2024-41368 9.8 CriticalAugust 29, 2024
• sourcefabric rpi-jukebox-rfid, phoniebox +1 more RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via... CVE-2024-41367 9.8 CriticalAugust 29, 2024
• sourcefabric rpi-jukebox-rfid, phoniebox +1 more RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via... CVE-2024-41366 9.8 CriticalAugust 29, 2024
• sourcefabric rpi-jukebox-rfid, phoniebox +1 more RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via... CVE-2024-41364 9.8 CriticalAugust 29, 2024
• sourcefabric rpi-jukebox-rfid, phoniebox +1 more RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via... CVE-2024-41361 9.8 CriticalAugust 29, 2024
• phoniebox Shell command injection in Phoniebox CVE-2024-3799 EPSS 14.6% 8.7 HighJuly 10, 2024
• phoniebox Insecure handling of GET argument in Phoniebox CVE-2024-3798 8.7 HighJuly 10, 2024
• miczflor rpi-jukebox-rfid, sourcefabric phoniebox +1 more MiczFlor RPi-Jukebox-RFID HTTP Request userScripts.php os command injection CVE-2024-0714 6.3 MediumJanuary 19, 2024
• sourcefabric rpi-jukebox-rfid RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the... CVE-2022-36749 9.8 CriticalAugust 30, 2022
• sourcefabric newscoop Because of Unrestricted Upload of a File with a Dangerous Type, Sourcefabric Newscoop 4.4.7... CVE-2020-11807 7.8 HighMay 19, 2020
• sourcefabric newscoop Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 4.x through 4.1.0 allow remote... CVE-2013-0730 4.3 MediumFebruary 22, 2013
• sourcefabric newscoop Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows... CVE-2012-4679 Public exploit 4.3 MediumAugust 27, 2012
• sourcefabric newscoop Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before... CVE-2012-1935 Public exploit 4.3 MediumAugust 27, 2012
• sourcefabric newscoop SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4... CVE-2012-1934 Public exploit 7.5 HighAugust 27, 2012
• sourcefabric newscoop Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before... CVE-2012-1933 Public exploit 6.8 MediumAugust 27, 2012
• sourcefabric campsite Cross-site scripting (XSS) vulnerability in the search feature in Campsite 3.4.0 allows remote... CVE-2010-4973 4.3 MediumNovember 1, 2011