Unrated severityNVD Advisory· Published Aug 22, 2019· Updated Aug 4, 2024
CVE-2019-12385
CVE-2019-12385
Description
An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL Injection, so any user able to perform lib/class/search.class.php searches (even guest users) can dump any data contained in the database (sessions, hashed passwords, etc.). This may lead to a full compromise of admin accounts, when combined with the weak password generator algorithm used in the lostpassword functionality.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Ampache/Ampachedescription
Patches
Vulnerability mechanics
References
2- lists.debian.org/debian-lts-announce/2019/11/msg00008.htmlmitremailing-listx_refsource_MLIST
- www.tarlogic.com/en/blog/vulnerabilities-in-ampache/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.