GCVE - cpe:2.3:a:sourcefabric:rpi-jukebox-rfid:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sourcefabric:rpi-jukebox-rfid:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Sourcefabric (`b383ef56-bcab-54bd-96fb-dc3cdcd5ef0b`)
Product	Rpi Jukebox Rfid (`bd675bd9-a877-52ac-bf1e-604e222aed6b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/miczflor/rpi-jukebox-rfid`	purl2cpe	2026-06-01 10:11:22.648983

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-10370`	vulnerable	2026-06-08 07:02:26.754186	MiczFlor RPi-Jukebox-RFID userScripts.php cross site scripting LOW (3.5) A vulnerability was identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. This vulnerability affects unknown code of the file /htdocs/userScripts.php. The manipulation of the argument Custom script leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-13T17:02:07.247Z Updated: 2026-02-03T21:44:39.870Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323778 https://vuldb.com/?ctiid.323778 https://vuldb.com/?submit.643522 https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/xss6.md https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/xss6.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10369`	vulnerable	2026-06-08 07:02:26.753700	MiczFlor RPi-Jukebox-RFID cardRegisterNew.php cross site scripting LOW (3.5) A vulnerability was determined in MiczFlor RPi-Jukebox-RFID up to 2.8.0. This affects an unknown part of the file /htdocs/cardRegisterNew.php. Executing manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-13T16:32:06.834Z Updated: 2025-09-15T15:38:29.029Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323777 https://vuldb.com/?ctiid.323777 https://vuldb.com/?submit.643520 https://vuldb.com/?submit.643521 https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/xss4.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10368`	vulnerable	2026-06-08 07:02:26.753198	MiczFlor RPi-Jukebox-RFID manageFilesFolders.php cross site scripting LOW (3.5) A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this issue is some unknown functionality of the file /htdocs/manageFilesFolders.php. Performing manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-13T15:32:05.853Z Updated: 2025-09-15T15:38:00.986Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323776 https://vuldb.com/?ctiid.323776 https://vuldb.com/?submit.643519 https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/xss3.md https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/xss3.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10367`	vulnerable	2026-06-08 07:02:26.752706	MiczFlor RPi-Jukebox-RFID cardEdit.php cross site scripting LOW (3.5) A vulnerability has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this vulnerability is an unknown functionality of the file /htdocs/cardEdit.php. Such manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-13T14:02:06.970Z Updated: 2025-09-15T15:37:29.204Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323775 https://vuldb.com/?ctiid.323775 https://vuldb.com/?submit.643518 https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/xss2.md https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/xss2.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10366`	vulnerable	2026-06-08 07:02:26.752195	MiczFlor RPi-Jukebox-RFID inc.setWlanIpMail.php cross site scripting LOW (3.5) A flaw has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected is an unknown function of the file /htdocs/inc.setWlanIpMail.php. This manipulation of the argument Email address causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-13T13:32:06.495Z Updated: 2025-09-15T15:36:53.647Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323774 https://vuldb.com/?ctiid.323774 https://vuldb.com/?submit.643517 https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/xss1.md https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/xss1.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10328`	vulnerable	2026-06-08 07:02:26.718737	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10327`	vulnerable	2026-06-08 07:02:26.718317	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10326`	vulnerable	2026-06-08 07:02:26.717801	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41369`	vulnerable	2026-06-08 06:43:54.467533	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41368`	vulnerable	2026-06-08 06:43:54.466853	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41367`	vulnerable	2026-06-08 06:43:54.466212	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41366`	vulnerable	2026-06-08 06:43:54.465484	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41364`	vulnerable	2026-06-08 06:43:54.464585	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41361`	vulnerable	2026-06-08 06:43:54.463048	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.