Vulnerabilities (CVE)

Filtered by vendor Lopalopa Subscribe
Total 46 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-41236 1 Lopalopa 1 Responsive School Management System 2024-08-30 N/A 7.2 HIGH
A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page
CVE-2024-42793 1 Lopalopa 1 Music Management System 2024-08-30 N/A 8.0 HIGH
A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via a crafted request to the /music/ajax.php?action=save_user page.
CVE-2024-42786 1 Lopalopa 1 Music Management System 2024-08-26 N/A 8.8 HIGH
A SQL injection vulnerability in "/music/view_user.php" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter of View User Profile Page.
CVE-2024-42785 1 Lopalopa 1 Music Management System 2024-08-26 N/A 8.8 HIGH
A SQL injection vulnerability in /music/index.php?page=view_playlist in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter.
CVE-2024-42784 1 Lopalopa 1 Music Management System 2024-08-26 N/A 9.8 CRITICAL
A SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter.
CVE-2024-42782 1 Lopalopa 1 Music Management System 2024-08-23 N/A 9.8 CRITICAL
A SQL injection vulnerability in "/music/ajax.php?action=find_music" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "search" parameter.
CVE-2024-42781 1 Lopalopa 1 Music Management System 2024-08-23 N/A 9.8 CRITICAL
A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email parameter.
CVE-2024-42780 1 Lopalopa 1 Music Management System 2024-08-23 N/A 8.8 HIGH
An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_genre" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVE-2024-42777 1 Lopalopa 1 Music Management System 2024-08-23 N/A 9.8 CRITICAL
An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVE-2024-42779 1 Lopalopa 1 Music Management System 2024-08-23 N/A 8.8 HIGH
An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVE-2024-42778 1 Lopalopa 1 Music Management System 2024-08-22 N/A 8.8 HIGH
An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVE-2024-41240 1 Lopalopa 1 Responsive School Management System 2024-08-13 N/A 6.1 MEDIUM
A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/teacher_login.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via the "error" parameter.
CVE-2024-41238 1 Lopalopa 1 Responsive School Management System 2024-08-12 N/A 5.3 MEDIUM
A SQL injection vulnerability in /smsa/student_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter.
CVE-2024-41237 1 Lopalopa 1 Responsive School Management System 2024-08-08 N/A 9.8 CRITICAL
A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter.
CVE-2024-41239 1 Lopalopa 1 Responsive School Management System 2024-08-08 N/A 4.8 MEDIUM
A Stored Cross Site Scripting (XSS) vulnerability was found in "/smsa/add_class_submit.php" in Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "class_name" parameter field.
CVE-2024-41242 1 Lopalopa 1 Responsive School Management System 2024-08-08 N/A 6.1 MEDIUM
A Reflected Cross Site Scripting (XSS) vulnerability was found in /smsa/student_login.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter.
CVE-2024-41245 1 Lopalopa 1 Responsive School Management System 2024-08-08 N/A 5.3 MEDIUM
An Incorrect Access Control vulnerability was found in /smsa/view_teachers.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view TEACHER details.
CVE-2024-41244 1 Lopalopa 1 Responsive School Management System 2024-08-08 N/A 5.3 MEDIUM
An Incorrect Access Control vulnerability was found in /smsa/view_class.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view CLASS details.
CVE-2024-41243 1 Lopalopa 1 Responsive School Management System 2024-08-08 N/A 5.3 MEDIUM
An Incorrect Access Control vulnerability was found in /smsa/view_marks.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view MARKS details.
CVE-2024-41246 1 Lopalopa 1 Responsive School Management System 2024-08-08 N/A 5.3 MEDIUM
An Incorrect Access Control vulnerability was found in /smsa/admin_dashboard.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view administrator dashboard.