Vulnerabilities > Ampache > High

DATE CVE VULNERABILITY TITLE RISK
2024-11-11 CVE-2024-51484 Cross-Site Request Forgery (CSRF) vulnerability in Ampache 7.0.0
Ampache is a web based audio/video streaming application and file manager.
network
low complexity
ampache CWE-352
8.1
2024-11-11 CVE-2024-51485 Cross-Site Request Forgery (CSRF) vulnerability in Ampache 7.0.0
Ampache is a web based audio/video streaming application and file manager.
network
low complexity
ampache CWE-352
8.1
2024-11-11 CVE-2024-51486 Unspecified vulnerability in Ampache 7.0.0
Ampache is a web based audio/video streaming application and file manager.
network
low complexity
ampache
8.4
2024-11-11 CVE-2024-51487 Cross-Site Request Forgery (CSRF) vulnerability in Ampache 7.0.0
Ampache is a web based audio/video streaming application and file manager.
network
low complexity
ampache CWE-352
8.1
2023-02-10 CVE-2023-0771 Unspecified vulnerability in Ampache
SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop.
network
low complexity
ampache
8.8
2022-12-23 CVE-2022-4665 Unspecified vulnerability in Ampache
Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6.
network
low complexity
ampache
8.8
2021-04-13 CVE-2021-21399 Improper Authentication vulnerability in Ampache
Ampache is a web based audio/video streaming application and file manager.
network
low complexity
ampache CWE-287
7.5
2019-08-22 CVE-2019-12385 SQL Injection vulnerability in Ampache
An issue was discovered in Ampache through 3.9.1.
network
low complexity
ampache CWE-89
8.8
2019-05-24 CVE-2017-18375 Deserialization of Untrusted Data vulnerability in Ampache 3.8.3
Ampache 3.8.3 allows PHP Object Instantiation via democratic.ajax.php and democratic.class.php.
network
low complexity
ampache CWE-502
8.8