Login Request a demo
SO
Vendor
Sourcefabric
4 products with CVEs on record
32
CVEs
0
On KEV
0
New 30D
Products
RP
Rpi-jukebox-rfid
Sourcefabric
9.8
15 CVEs0 on KEV0 new
PH
Phoniebox
Sourcefabric
9.8
10 CVEs0 on KEV0 new
NE
Newscoop
Sourcefabric
7.8
6 CVEs0 on KEV0 new
CA
Campsite
Sourcefabric
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-63951
PH
Phoniebox
Sourcefabric
7.5
1%
Dec 18An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi-Jukebox-RFID project through commit 4b2334f0ae0e87c0568876fc41c48c38aa9a7014…
CVE-2025-10370
RP
Rpi-jukebox-rfid
Sourcefabric
5.4
1%
Sep 13MiczFlor RPi-Jukebox-RFID userScripts.php cross site scripting
CVE-2025-10369
RP
Rpi-jukebox-rfid
Sourcefabric
6.1
0%
Sep 13MiczFlor RPi-Jukebox-RFID cardRegisterNew.php cross site scripting
CVE-2025-10368
RP
Rpi-jukebox-rfid
Sourcefabric
6.1
0%
Sep 13MiczFlor RPi-Jukebox-RFID manageFilesFolders.php cross site scripting
CVE-2025-10367
RP
Rpi-jukebox-rfid
Sourcefabric
6.1
0%
Sep 13MiczFlor RPi-Jukebox-RFID cardEdit.php cross site scripting
CVE-2025-10366
RP
Rpi-jukebox-rfid
Sourcefabric
5.4
0%
Sep 13MiczFlor RPi-Jukebox-RFID inc.setWlanIpMail.php cross site scripting
CVE-2025-10328
RP
Rpi-jukebox-rfid
Sourcefabric
9.8
8%
Sep 12MiczFlor RPi-Jukebox-RFID playsinglefile.php os command injection
CVE-2025-10327
RP
Rpi-jukebox-rfid
Sourcefabric
9.8
10%
Sep 12MiczFlor RPi-Jukebox-RFID shuffle.php os command injection
CVE-2025-10326
RP
Rpi-jukebox-rfid
Sourcefabric
9.8
6%
Sep 12MiczFlor RPi-Jukebox-RFID single.php os command injection
CVE-2024-41366
PH
Phoniebox
Sourcefabric
9.8
1%
Aug 29RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\userScripts.php
CVE-2024-41361
PH
Phoniebox
Sourcefabric
9.8
1%
Aug 29RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\manageFilesFolders.php
CVE-2024-41364
PH
Phoniebox
Sourcefabric
9.8
1%
Aug 29RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\trackEdit.php
CVE-2024-41367
PH
Phoniebox
Sourcefabric
9.8
1%
Aug 29RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\api\playlist\appendFileToPlaylist.php
CVE-2024-41368
PH
Phoniebox
Sourcefabric
9.8
1%
Aug 29RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWlanIpMail.php
CVE-2024-41369
PH
Phoniebox
Sourcefabric
9.8
1%
Aug 29RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWifi.php
CVE-2024-3799
PH
Phoniebox
Sourcefabric
8.7
15%
Jul 10Shell command injection in Phoniebox
CVE-2024-3798
PH
Phoniebox
Sourcefabric
8.7
0%
Jul 10Insecure handling of GET argument in Phoniebox
CVE-2024-0714
PH
Phoniebox
Sourcefabric
9.8
2%
Jan 19MiczFlor RPi-Jukebox-RFID HTTP Request userScripts.php os command injection
CVE-2022-36749
RP
Rpi-jukebox-rfid
Sourcefabric
9.8
3%
Aug 30RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php
CVE-2020-11807
NE
Newscoop
Sourcefabric
7.8
1%
May 19Because of Unrestricted Upload of a File with a Dangerous Type, Sourcefabric Newscoop 4.4.7 allows an authenticated user to execute arbitrary PHP code (and sometimes terminal…
CVE-2013-0730
NE
Newscoop
Sourcefabric
–
2%
Feb 22Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 4.x through 4.1.0 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1)…
CVE-2012-4679
NE
Newscoop
Sourcefabric
–
2%
Aug 27Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the f_user_name parameter
CVE-2012-1935
NE
Newscoop
Sourcefabric
–
3%
Aug 27Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote attackers to inject arbitrary web script or HTML via the (1)…
CVE-2012-1934
NE
Newscoop
Sourcefabric
–
3%
Aug 27SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attackers to execute arbitrary SQL commands via the…
CVE-2012-1933
NE
Newscoop
Sourcefabric
–
6%
Aug 27Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_globals is enabled, allow remote attackers to execute arbitrary…
CVE-2010-4973
CA
Campsite
Sourcefabric
–
1%
Nov 1Cross-site scripting (XSS) vulnerability in the search feature in Campsite 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the f_search_keywords parameter