VendorsSourcefabricrpi-jukebox-rfidall versions
Vulnerabilities

Sourcefabric RPi-Jukebox-RFID

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2025-10327
MiczFlor RPi-Jukebox-RFID shuffle.php os command injection
Published 2025-09-12 · Modified
9.81 PoCEPSS 0.102
CVE-2025-10328
MiczFlor RPi-Jukebox-RFID playsinglefile.php os command injection
Published 2025-09-12 · Analyzed
9.8EPSS 0.094
CVE-2025-10326
MiczFlor RPi-Jukebox-RFID single.php os command injection
Published 2025-09-12 · Analyzed
9.8EPSS 0.071
CVE-2022-36749
RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php. This vulnerability is exploited via a crafted payload injected into the file name of an uploaded file.
Published 2022-08-30 · Modified
9.8EPSS 0.027
CVE-2025-10369
MiczFlor RPi-Jukebox-RFID cardRegisterNew.php cross site scripting
Published 2025-09-13 · Analyzed
6.1EPSS 0.003
CVE-2025-10367
MiczFlor RPi-Jukebox-RFID cardEdit.php cross site scripting
Published 2025-09-13 · Analyzed
6.1EPSS 0.003
CVE-2025-10368
MiczFlor RPi-Jukebox-RFID manageFilesFolders.php cross site scripting
Published 2025-09-13 · Analyzed
6.1EPSS 0.003
CVE-2025-10370
MiczFlor RPi-Jukebox-RFID userScripts.php cross site scripting
Published 2025-09-13 · Modified
5.41 PoCEPSS 0.007
CVE-2025-10366
MiczFlor RPi-Jukebox-RFID inc.setWlanIpMail.php cross site scripting
Published 2025-09-13 · Analyzed
5.4EPSS 0.003