https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T00:58:42.440408+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2019-12385 CVE-2019-12385 2026-11-09T00:58:42.445337+00:00

An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL Injection, so any user able to perform lib/class/search.class.php searches (even guest users) can dump any data contained in the database (sessions, hashed passwords, etc.). This may lead to a full compromise of admin accounts, when combined with the weak password generator algorithm used in the lostpassword functionality.

 https://db.gcve.eu/vuln/usn-4693-1 USN-4693-1 — ampache vulnerabilities 2026-11-09T00:58:42.445411+00:00

Affected: Ubuntu:16.04:LTS: ampache

It was discovered that an SQL injection vulnerability exists in the Ampache search engine. Any user able to perform searches could dump any data contained in the database. An attacker could use this to disclose sensitive information. (CVE-2019-12385)

It was discovered that an XSS vulnerability in Ampache. An attacker could use this vulnerability to force an admin to create a new privileged user. (CVE-2019-12386)