Submit #643500: MiczFlor RPi-Jukebox-RFID 2.8.0 Command Injectioninfo

TitleMiczFlor RPi-Jukebox-RFID 2.8.0 Command Injection
DescriptionRCE vulnerability in RPi-Jukebox-RFID v2.8.0 of file //htdocs/api/playlist/single.php of param "playlist".The manipulation results in Remote Privilege Escalation. The attack can be executed remotely.
Source⚠️ https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/rce3.md
User
 XU17 (UID 83703)
Submission08/28/2025 20:18 (8 months ago)
Moderation09/12/2025 10:34 (15 days later)
StatusAccepted
VulDB entry323752 [MiczFlor RPi-Jukebox-RFID up to 2.8.0 single.php playlist os command injection]
Points17

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!