Sourcefabric Phoniebox
8 CVEs affecting Sourcefabric Phoniebox. Latest disclosed: 2025-12-18. Critical: 6, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-41369 | Critical | 9.8 | 2024-08-29 | RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWifi.php |
CVE-2024-41368 | Critical | 9.8 | 2024-08-29 | RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWlanIpMail.php |
CVE-2024-41367 | Critical | 9.8 | 2024-08-29 | RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\api\playlist\appendFileToPlaylist.php |
CVE-2024-41366 | Critical | 9.8 | 2024-08-29 | RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\userScripts.php |
CVE-2024-41364 | Critical | 9.8 | 2024-08-29 | RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\trackEdit.php |
CVE-2024-41361 | Critical | 9.8 | 2024-08-29 | RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\manageFilesFolders.php |
CVE-2025-63951 | High | 7.5 | 2025-12-18 | An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi-Jukebox-RFID project through commit 4b2334f0ae0e87c0568876fc41c4… |
CVE-2024-0714 | Medium | 6.3 | 2024-01-19 | A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.5.0. It has been rated as critical. Affected by this issue is some unknown functionality of the… |