GCVE - cpe:2.3:a:harry0703:moneyprinterturbo:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:harry0703:moneyprinterturbo:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Harry0703 (`9c9faff1-fa65-5e73-b15a-a2192d4b37de`)
Product	Moneyprinterturbo (`80b5df5f-c2cc-576a-97db-f6498f3be0fa`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
`pkg:github/harry0703/moneyprinterturbo`	purl2cpe	2026-07-28 16:41:09.916023

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-7897`	vulnerable	2026-06-08 07:45:18.471616	harry0703 MoneyPrinterTurbo API Endpoint base.py verify_token missing authentication HIGH (7.3) A vulnerability was found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this issue is the function verify_token of the file app/controllers/base.py of the component API Endpoint. The manipulation leads to missing authentication. The attack may be launched remotely. Published: 2025-07-20T15:02:04.770Z Updated: 2025-07-21T12:38:55.383Z Open on db.gcve.eu Reference links https://vuldb.com/?id.317012 https://vuldb.com/?ctiid.317012 https://vuldb.com/?submit.609040	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7896`	vulnerable	2026-06-08 07:45:18.471090	harry0703 MoneyPrinterTurbo video.py delete_video path traversal MEDIUM (6.3) A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this vulnerability is the function download_video/delete_video of the file app/controllers/v1/video.py. The manipulation leads to path traversal. The attack can be launched remotely. Published: 2025-07-20T14:44:04.741Z Updated: 2025-07-21T12:39:40.937Z Open on db.gcve.eu Reference links https://vuldb.com/?id.317011 https://vuldb.com/?ctiid.317011 https://vuldb.com/?submit.608941 https://vuldb.com/?submit.609041	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7895`	vulnerable	2026-06-08 07:45:18.470643	harry0703 MoneyPrinterTurbo File Extension video.py upload_bgm_file unrestricted upload MEDIUM (6.3) A vulnerability, which was classified as critical, was found in harry0703 MoneyPrinterTurbo up to 1.2.6. Affected is the function upload_bgm_file of the file app/controllers/v1/video.py of the component File Extension Handler. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. Published: 2025-07-20T14:32:04.998Z Updated: 2025-07-21T13:09:18.390Z Open on db.gcve.eu Reference links https://vuldb.com/?id.317010 https://vuldb.com/?ctiid.317010 https://vuldb.com/?submit.608940	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11607`	vulnerable	2026-06-08 07:04:28.595090	harry0703 MoneyPrinterTurbo API Endpoint music.py upload_music path traversal MEDIUM (6.3) A weakness has been identified in harry0703 MoneyPrinterTurbo up to 1.2.6. The impacted element is the function upload_music of the file app/controllers/v1/music.py of the component API Endpoint. Executing a manipulation of the argument File can lead to path traversal. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. Published: 2025-10-11T16:32:05.833Z Updated: 2026-02-24T06:59:23.650Z Open on db.gcve.eu Reference links https://vuldb.com/?id.327929 https://vuldb.com/?ctiid.327929 https://vuldb.com/?submit.672550 https://www.notion.so/Arbitrary-File-Write-Vulnerability-in-MoneyPrinterTurbo-1-2-6-288014c4d9ca809bb411e4fe875d1e22	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10472`	vulnerable	2026-06-08 07:02:26.931567	harry0703 MoneyPrinterTurbo URL video.py stream_video path traversal MEDIUM (5.3) A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6. The impacted element is the function download_video/stream_video of the file app/controllers/v1/video.py of the component URL Handler. The manipulation of the argument file_path leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-09-15T18:32:07.097Z Updated: 2025-09-15T18:51:43.540Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323892 https://vuldb.com/?ctiid.323892 https://vuldb.com/?submit.648393 https://www.notion.so/Path-Traversal-Vulnerability-in-MoneyPrinterTurbo-1-2-6-265014c4d9ca80e38da4deaeee8b46f5?source=copy_link	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Moneyprinterturbo

Notes

PURL mappings

Vulnerability references

Contribute