Skip to content
Noroxi

PHPSUGAR records

10 published records for vendor phpsugar.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

10 records
  • CVE-2017-15081
    40Plan

    In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    phpsugar · php melodyOct 24, 2017

  • CVE-2018-5211
    40Plan

    PHP Melody version 2.7.1 suffer from SQL Injection Time-based attack on the page ajax.php with the parameter playlist.

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    phpsugar · php melodyJan 9, 2018

  • CVE-2017-15579
    39Monitor

    In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.php.

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    phpsugar · php melodyOct 17, 2017

  • CVE-2017-15578
    35Monitor

    In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php.

    HighCVSS 8.8Proof of conceptEPSS 1%

    phpsugar · php melodyOct 17, 2017

  • CVE-2021-47915
    34Monitor

    PHP Melody 3.0 SQL Injection Vulnerability via Edit Video Parameter

    HighCVSS 8.6No exploitEPSS 1%

    phpsugar · php melodyFeb 1, 2026

  • CVE-2009-2895
    30Monitor

    SQL injection vulnerability in rss.php in Ultimate Regnow Affiliate (URA) 3.0 allows remote attackers to execute arbitrary SQL commands via

    HighCVSS 7.5Proof of conceptEPSS 1%

    phpsugar · ultimate regnow affiliateAug 20, 2009

  • CVE-2017-15648
    24Monitor

    In PHPSUGAR PHP Melody before 2.7.3, page_manager.php has XSS via the page_title parameter.

    MediumCVSS 6.1No exploitEPSS 1%

    phpsugar · php melodyOct 19, 2017

  • CVE-2021-47914
    20Monitor

    PHP Melody 3.0 Persistent XSS Vulnerability via Edit Video Parameter

    MediumCVSS 5.1No exploitEPSS 0%

    phpsugar · php melodyFeb 1, 2026

  • CVE-2021-47912
    20Monitor

    PHP Melody 3.0 Non-Persistent Cross-Site Scripting via Multiple Parameters

    MediumCVSS 5.1No exploitEPSS 0%

    phpsugar · php melodyFeb 1, 2026

  • CVE-2021-47913
    20Monitor

    PHP Melody 3.0 Persistent Cross-Site Scripting via Video Editor

    MediumCVSS 5.1No exploitEPSS 0%

    phpsugar · php melodyFeb 1, 2026