Vulnerabilities > Sourcefabric > Phoniebox > 2.7.0

DATE CVE VULNERABILITY TITLE RISK
2024-08-29 CVE-2024-41361 Code Injection vulnerability in Sourcefabric Phoniebox 2.7.0
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\manageFilesFolders.php
network
low complexity
sourcefabric CWE-94
critical
9.8
2024-08-29 CVE-2024-41364 Code Injection vulnerability in Sourcefabric Phoniebox 2.7.0
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\trackEdit.php
network
low complexity
sourcefabric CWE-94
critical
9.8
2024-08-29 CVE-2024-41366 Code Injection vulnerability in Sourcefabric Phoniebox 2.7.0
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\userScripts.php
network
low complexity
sourcefabric CWE-94
critical
9.8
2024-08-29 CVE-2024-41367 Code Injection vulnerability in Sourcefabric Phoniebox 2.7.0
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\api\playlist\appendFileToPlaylist.php
network
low complexity
sourcefabric CWE-94
critical
9.8
2024-08-29 CVE-2024-41368 Code Injection vulnerability in Sourcefabric Phoniebox 2.7.0
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWlanIpMail.php
network
low complexity
sourcefabric CWE-94
critical
9.8
2024-08-29 CVE-2024-41369 Unspecified vulnerability in Sourcefabric Phoniebox 2.7.0
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWifi.php
network
low complexity
sourcefabric
critical
9.8