FO
Vendor
Fomori
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2015-8310 | CH Cherrymusic Fomori | 5.4 | Mar 27 | Cross-site scripting (XSS) vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to inject arbitrary web script or HTML via the playlistname field when… |
| CVE-2015-8309 | CH Cherrymusic Fomori | 4.3 | Mar 27 | Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download." |