High severity8.8NVD Advisory· Published Aug 22, 2019· Updated Jun 17, 2026
CVE-2019-12385
CVE-2019-12385
Description
An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL Injection, so any user able to perform lib/class/search.class.php searches (even guest users) can dump any data contained in the database (sessions, hashed passwords, etc.). This may lead to a full compromise of admin accounts, when combined with the weak password generator algorithm used in the lostpassword functionality.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Ampache/Ampachedescription
Patches
Vulnerability mechanics
References
2- www.tarlogic.com/en/blog/vulnerabilities-in-ampache/nvdExploitThird Party Advisory
- lists.debian.org/debian-lts-announce/2019/11/msg00008.htmlnvd
News mentions
0No linked articles in our index yet.