Login Request a demo
PH
Product
Phoniebox
by Sourcefabric · last CVE Dec 18, 2025
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 7High 3Medium 0Low 0
Severity
All severities10Critical7High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Phoniebox to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-41367
9.8
1%
Aug 29
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\api\playlist\appendFileToPlaylist.php
Affected: 2.7.0
CVE-2024-41369
9.8
1%
Aug 29
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWifi.php
Affected: 2.7.0
CVE-2024-41368
9.8
1%
Aug 29
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWlanIpMail.php
Affected: 2.7.0
CVE-2024-41361
9.8
1%
Aug 29
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\manageFilesFolders.php
Affected: 2.7.0
CVE-2024-41364
9.8
1%
Aug 29
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\trackEdit.php
Affected: 2.7.0
CVE-2024-41366
9.8
1%
Aug 29
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\userScripts.php
Affected: 2.7.0
CVE-2024-0714
9.8
2%
Jan 19
MiczFlor RPi-Jukebox-RFID HTTP Request userScripts.php os command injection
Affected: through 2.5.0
CVE-2024-3799
8.7
15%
Jul 10
Shell command injection in Phoniebox
Affected: through 2.7
CVE-2024-3798
8.7
0%
Jul 10
Insecure handling of GET argument in Phoniebox
Affected: through 2.7
CVE-2025-63951
7.5
1%
Dec 18
An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi-Jukebox-RFID project through commit 4b2334f0ae0e87c0568876fc41c48c38aa9a7014…
Affected: through 2025-10-07
Showing 10