CVE-2017-15648

In PHPSUGAR PHP Melody before 2.7.3, page_manager.php has XSS via the page_title parameter.

• CWE-79

• http://www.phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release/Release Notes, Vendor Advisory
• https://blogs.securiteam.com/index.php/archives/3464Exploit, Third Party Advisory
• http://www.phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release/Release Notes, Vendor Advisory
• https://blogs.securiteam.com/index.php/archives/3464Exploit, Third Party Advisory

Published

Oct 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15642In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.…
• CVE-2017-15643An active network attacker (MiTM) can achieve remote code ex…
• CVE-2017-15644SSRF exists in Webmin 1.850 via the PATH_INFO to tunnel/link…
• CVE-2017-15645CSRF exists in Webmin 1.850. By sending a GET request to at/…
• CVE-2017-15646Webmin before 1.860 has XSS with resultant remote code execu…
• CVE-2017-15647On FiberHome routers, Directory Traversal exists in /cgi-bin…
• CVE-2017-15649net/packet/af_packet.c in the Linux kernel before 4.13.6 all…
• CVE-2017-1565IBM Rational Quality Manager and IBM Rational Collaborative …5.4
• CVE-2017-15650musl libc before 1.1.17 has a buffer overflow via crafted DN…
• CVE-2017-15651PRTG Network Monitor 17.3.33.2830 allows remote authenticate…
• CVE-2017-15652Artifex Ghostscript 9.22 is affected by: Obtain Information.…
• CVE-2017-15653Improper administrator IP validation after his login in the …