Browse CVEs

HIGH 7.2 CVE-2024-50827 A SQL Injection vulnerability was found in /admin/add_subject.php in kashipara E-learning Management System Project 1.0 via the subject_code paramete… E Learning Management System No fix yet Fix from $1,9502024-11-14 HIGH 7.2 CVE-2024-50828 A SQL Injection vulnerability was found in /admin/edit_department.php in kashipara E-learning Management System Project 1.0 via the d parameter. E Learning Management System No fix yet Fix from $1,9502024-11-14 HIGH 7.2 CVE-2024-50829 A SQL Injection vulnerability was found in /admin/edit_subject.php in kashipara E-learning Management System Project 1.0 via the unit parameter. E Learning Management System No fix yet Fix from $1,9502024-11-14 CRITICAL 9.8 CVE-2024-50823 A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and password param… E Learning Management System No fix yet Fix from $2,3002024-11-14 HIGH 7.2 CVE-2024-50834 A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters. E Learning Management System No fix yet Fix from $1,9502024-11-14 HIGH 7.2 CVE-2024-50835 A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and… E Learning Management System No fix yet Fix from $1,9502024-11-14 CRITICAL 9.8 CVE-2024-50833 A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the username and password parameters. E Learning Management System No fix yet Fix from $2,3002024-11-14 HIGH 7.2 CVE-2024-50832 A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning Management System Project 1.0 via the class_name parameter. E Learning Management System No fix yet Fix from $1,9502024-11-14 MEDIUM 5.4 CVE-2024-50838 A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/department.php in KASHIPARA E-learning Management System Project 1.0. This vuln… E Learning Management System No fix yet Fix from $1,6002024-11-14 MEDIUM 5.4 CVE-2024-50837 A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/admin_user.php in KASHIPARA E-learning Management System Project 1.0. This vuln… E Learning Management System No fix yet Fix from $1,6002024-11-14 MEDIUM 5.4 CVE-2024-50839 A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/add_subject.php in KASHIPARA E-learning Management System Project 1.0. This vul… E Learning Management System No fix yet Fix from $1,6002024-11-14 MEDIUM 5.4 CVE-2024-50840 A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/class.php in KASHIPARA E-learning Management System Project 1.0. This vulnerabi… E Learning Management System No fix yet Fix from $1,6002024-11-14 MEDIUM 5.4 CVE-2024-50841 A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/calendar_of_events.php in KASHIPARA E-learning Management System Project 1.0. T… E Learning Management System No fix yet Fix from $1,6002024-11-14 MEDIUM 5.4 CVE-2024-50842 A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/school_year.php in KASHIPARA E-learning Management System Project 1.0. This vul… E Learning Management System No fix yet Fix from $1,6002024-11-14 CRITICAL 9.8 CVE-2024-42797 An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Music Management System v1.0. This vulnera… Music Management System No fix yet Fix from $2,3002024-09-25 HIGH 7.6 CVE-2024-42798 An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_user in Kashipara Music Managem… Music Management System No fix yet Fix from $1,9502024-09-16 MEDIUM 5.9 CVE-2024-42796 An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music Management System v1.0. This vulnerabil… Music Management System No fix yet Fix from $1,6002024-09-16 HIGH 8.0 CVE-2024-42793 A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via a crafted request to the /music/ajax.php?ac… Music Management System No fix yet Fix from $1,9502024-08-28 HIGH 7.2 CVE-2024-41236 A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrar… Responsive School Management System No fix yet Fix from $1,9502024-08-28 MEDIUM 5.4 CVE-2024-42790 A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/index.php?page=test" in Kashipara Music Management System v1.0. This vulner… Music Management System No fix yet Fix from $1,6002024-08-26 HIGH 8.8 CVE-2024-42791 A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=delete_genre. Music Management System No fix yet Fix from $1,9502024-08-26 MEDIUM 6.1 CVE-2024-42788 A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This vu… Music Management System No fix yet Fix from $1,6002024-08-26 MEDIUM 6.3 CVE-2024-42789 A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/controller.php?page=test" in Kashipara Music Management System v1.0. This v… Music Management System No fix yet Fix from $1,6002024-08-26 MEDIUM 6.1 CVE-2024-42787 A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0. This… Music Management System No fix yet Fix from $1,6002024-08-26 CRITICAL 9.8 CVE-2024-42781 A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote attackers to execute arbitrar… Music Management System No fix yet Fix from $2,3002024-08-21 CRITICAL 9.8 CVE-2024-42782 A SQL injection vulnerability in "/music/ajax.php?action=find_music" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrar… Music Management System No fix yet Fix from $2,3002024-08-21 CRITICAL 9.8 CVE-2024-42783 Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php. An attacker can execute arbitrary SQL com… Music Management System No fix yet Fix from $2,3002024-08-21 CRITICAL 9.8 CVE-2024-42784 A SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music Management System v1.0 allows an attacker to execute arbi… Music Management System No fix yet Fix from $2,3002024-08-21 HIGH 8.8 CVE-2024-42778 An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0. This allows … Music Management System No fix yet Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-42779 An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This allows att… Music Management System No fix yet Fix from $1,9502024-08-21