Browse CVEs

CRITICAL 9.1 CVE-2025-51567 A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, which allows remote attackers to execute arbitrary… Online Exam System No fix yet Fix from $2,3002026-01-12 CRITICAL 9.1 CVE-2024-42773 An Incorrect Access Control vulnerability was found in /admin/edit_room_controller.php in Kashipara Hotel Management System v1.0, which allows an una… Hotel Management System No fix yet Fix from $2,3002024-08-22 HIGH 7.2 CVE-2024-42767 Kashipara Hotel Management System v1.0 is vulnerable to Unrestricted File Upload RCE via /admin/add_room_controller.php. Hotel Management System No fix yet Fix from $1,9502024-08-22 CRITICAL 9.1 CVE-2024-42775 An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unau… Hotel Management System No fix yet Fix from $2,3002024-08-22 HIGH 7.5 CVE-2024-42772 An Incorrect Access Control vulnerability was found in /admin/rooms.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated at… Hotel Management System No fix yet Fix from $1,9502024-08-22 HIGH 7.5 CVE-2024-42774 An Incorrect Access Control vulnerability was found in /admin/delete_room.php in Kashipara Hotel Management System v1.0, which allows an unauthentica… Hotel Management System No fix yet Fix from $1,9502024-08-22 HIGH 7.2 CVE-2024-42776 Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php. Hotel Management System No fix yet Fix from $1,9502024-08-22 MEDIUM 6.8 CVE-2024-42768 A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Hotel Management System v1.0 via /admin/delete_room.php. Hotel Management System No fix yet Fix from $1,6002024-08-22 MEDIUM 6.1 CVE-2024-42769 A Reflected Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php " of Kashipara Hotel Management System v1.0, which allows re… Hotel Management System No fix yet Fix from $1,6002024-08-22 CRITICAL 9.8 CVE-2024-40480 A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam System v1.0, which allows remo… Online Exam System Mitigation only Fix from $2,3002024-08-12 HIGH 8.1 CVE-2024-40479 A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL comm… Online Exam System No fix yet Fix from $1,9502024-08-12 MEDIUM 5.4 CVE-2024-40478 A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1.0, which allows remote attac… Online Exam System No fix yet Fix from $1,6002024-08-12 MEDIUM 5.4 CVE-2023-49272 Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'children' parameter of the reserva… Hotel Management System Mitigation only Fix from $1,6002023-12-20 MEDIUM 5.4 CVE-2023-49270 Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'check_in_date' parameter of the re… Hotel Management System Mitigation only Fix from $1,6002023-12-20 MEDIUM 5.4 CVE-2023-49271 Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'check_out_date' parameter of the r… Hotel Management System Mitigation only Fix from $1,6002023-12-20 MEDIUM 5.4 CVE-2023-49269 Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'adults' parameter of the reservati… Hotel Management System No fix yet Fix from $1,6002023-12-20