Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

craig drummond cantata vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-7300
Absolute path traversal vulnerability in cantata prior to 1.2.2 allows local users to read arbitrary files via a full pathname in a request to the internal httpd server. NOTE: this vulnerability can be leveraged by remote attackers using CVE-2013-7301.
Craig Drummond CantataCraig Drummond Cantata 1.2.0Craig Drummond Cantata 1.1.3Craig Drummond Cantata 1.0.0Craig Drummond Cantata 0.9.2Craig Drummond Cantata 0.7.1Craig Drummond Cantata 0.7.0Craig Drummond Cantata 1.1.0Craig Drummond Cantata 1.0.3Craig Drummond Cantata 0.8.3Craig Drummond Cantata 0.8.2Craig Drummond Cantata 1.1.2Craig Drummond Cantata 1.1.1Craig Drummond Cantata 0.9.1Craig Drummond Cantata 0.9.0Craig Drummond Cantata 0.8.3.1Craig Drummond Cantata 1.0.2Craig Drummond Cantata 1.0.1Craig Drummond Cantata 0.8.1Craig Drummond Cantata 0.8.0
NA
CVE-2013-7301
Cantata prior to 1.2.2 does not restrict access to files in the play queue, which allows remote malicious users to obtain sensitive information by reading the songs in the queue.
Craig Drummond Cantata 0.9.0Craig Drummond Cantata 0.8.3.1Craig Drummond Cantata 0.8.3Craig Drummond Cantata 0.8.2Craig Drummond Cantata 1.1.2Craig Drummond Cantata 1.1.1Craig Drummond Cantata 1.1.0Craig Drummond Cantata 1.0.3Craig Drummond Cantata 1.0.2Craig Drummond CantataCraig Drummond Cantata 1.1.3Craig Drummond Cantata 1.0.0Craig Drummond Cantata 0.9.1Craig Drummond Cantata 0.8.1Craig Drummond Cantata 0.7.1Craig Drummond Cantata 1.2.0Craig Drummond Cantata 1.0.1Craig Drummond Cantata 0.9.2Craig Drummond Cantata 0.8.0Craig Drummond Cantata 0.7.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
firmwareCVE-2023-52866CVE-2024-4367CVE-2024-1721CVE-2023-34992XML injectionCVE-2023-52817SQLCVE-2023-52855
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook