CVE-2024-54932

The Kashipara E-learning Management System v1.0 is vulnerable to an SQL Injection flaw located in the /admin/delete_department.php endpoint. This vulnerability allows an attacker to inject malicious SQL code, potentially leading to unauthorized data access or manipulation. As of the current repor...

CVE-2024-54927

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/deleteusers.php...

CVE-2024-54927

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection within the /admin/delete_users.php file. This vulnerability allows for potential exploitation of the database. While specific exploit links or in-the-wild exploitation details are not provided in the documents, the issue p...

CVE-2024-54925

The kashipara E-learning Management System v1.0 is vulnerable to a SQL Injection flaw within the /remove_sent_message.php file. This vulnerability is caused by improper neutralization of special elements in the id parameter, which allows remote attackers to execute arbitrary SQL commands. Success...

CVE-2024-54931

A SQL Injection vulnerability exists in the kashipara E-learning Management System v1.0 within the /admin/delete_event.php endpoint. The root cause is the improper neutralization of special elements used in an SQL command via the id parameter. This flaw allows remote attackers to execute arbitrar...

CVE-2024-54928

kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/deleteteacher.php,...

CVE-2024-54938

A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attackers to access sensitive files and directories via /admin/uploads...

CVE-2024-54923

A SQL Injection vulnerability was found in /admin/editteacher.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the department parameter...

CVE-2024-54921

A SQL Injection was found in /studentsignup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username, firstname, lastname, and classid parameters...

CVE-2024-54924

A SQL Injection was found in /admin/editcontent.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the title and content parameters...

CVE-2024-54938

A Directory Listing issue was identified in Kashipara E-Learning Management System v1.0 . This vulnerability allows remote attackers to access sensitive files and directories by interacting with the /admin/uploads API endpoint. The impact includes unauthorized viewing of important files. While no...

CVE-2024-54928

The Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in the /admin/delete_teacher.php file. This vulnerability originates from improper neutralization of special elements used in an SQL command, specifically within the delete_teacher.php API endpoint. Successful exploita...

CVE-2024-54935

A Stored Cross-Site Scripting XSS vulnerability was found in /sendmessageteachertostudent.php of kashipara E-learning Management System v1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the mymessage parameter...

CVE-2024-54936

A Stored Cross-Site Scripting XSS vulnerability was found in /sendmessage.php of Kashipara E-learning Management System v1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the mymessage parameter...

CVE-2024-54919

A Stored Cross Site Scripting XSS was found in /teacheravatar.php of kashipara E-learning Management System v1.0. This vulnerability allows remote attackers to execute arbitrary java script via the filename parameter...

CVE-2024-54927

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/deleteusers.php...

CVE-2024-54926

A SQL Injection vulnerability was found in /searchclass.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the schoolyear parameter...

CVE-2024-54928

kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/deleteteacher.php,...

CVE-2024-54938

A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attackers to access sensitive files and directories via /admin/uploads...

CVE-2024-54923

A SQL Injection vulnerability was found in /admin/editteacher.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the department parameter...