High severity8.1NVD Advisory· Published Feb 1, 2026· Updated Jun 17, 2026
CVE-2021-47915
CVE-2021-47915
Description
PHP Melody version 3.0 contains a remote SQL injection vulnerability in the video edit module that allows authenticated attackers to inject malicious SQL commands. Attackers can exploit the unvalidated 'vid' parameter to execute arbitrary database queries and potentially compromise the web application and database management system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:phpsugar:php_melody:3.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpsugar:php_melody:3.0:*:*:*:*:*:*:*
- (no CPE)range: 3.0
Patches
Vulnerability mechanics
References
4- www.vulnerability-lab.com/get_content.phpnvdExploitThird Party Advisory
- www.phpsugar.com/blog/2021/09/php-melody-3-0-vulnerability-report-fix/nvdVendor Advisory
- www.vulncheck.com/advisories/php-melody-sql-injection-vulnerability-via-edit-video-parameternvdThird Party Advisory
- www.phpsugar.com/phpmelody.htmlnvdProduct
News mentions
0No linked articles in our index yet.