854 matches found
Kashipara E-learning Management System 跨站脚本漏洞
Kashipara E-learning Management System is a learning management system from Kashipara Inc. A cross-site scripting vulnerability exists in Kashipara E-learning Management System version 1.0, which is rooted in a stored cross-site scripting attack that allows remote attackers to execute arbitrary...
Kashipara E-learning Management System 跨站脚本漏洞
Kashipara E-learning Management System is a learning management system from Kashipara Inc. A cross-site scripting vulnerability exists in Kashipara E-learning Management System version 1.0, which is rooted in a stored cross-site scripting attack that allows a remote attacker to execute arbitrary...
CVE-2024-50833
Summary: CVE-2024-50833 is a SQL Injection in the KASHIPARA E-learning Management System Project 1.0, exploitable via /login.php using the username and password parameters. The vulnerability affects version 1.0 of the system and is described across multiple feeds, with a high-severity impact (NVD...
PT-2024-34431 · Unknown · Kashipara E-Learning Management System Project
Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /login.php file of the KASHIPARA E-learning Management System Project. The issue is related to the username and password parameters...
Kashipara E-learning Management System 安全漏洞
Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System version 1.0, which is caused by an SQL injection in the parameter subjectcode...
CVE-2024-50837: Improper Neutralization of Input During Web Page Generation
A Stored Cross-Site Scripting XSS vulnerability was found in /admin/adminuser.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and username parameters...
CVE-2024-50827: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/addsubject.php in kashipara E-learning Management System Project 1.0 via the subjectcode parameter...
PT-2024-34427
Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /admin/edit subject.php file, specifically via the unit parameter. This allows for potential manipulation of database queries...
CVE-2024-50839
A Stored Cross-Site Scripting (XSS) vulnerability exists in the KASHIPARA E-learning Management System Project version 1.0 . The flaw is located within the /admin/add_subject.php and /lms/admin/add_subject.php API endpoints, where the application fails to properly sanitize the subject_code and ti...
CVE-2024-50838
A Stored Cross-Site Scripting XSS vulnerability was found in /admin/department.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the d and pi parameters...
CVE-2024-50838
A Stored Cross-Site Scripting (XSS) vulnerability exists in the KASHIPARA E-learning Management System Project version 1.0 . The flaw is located in the /admin/department.php file, where remote attackers can execute arbitrary scripts by exploiting the d and pi parameters. While the CNNVD document ...
CVE-2024-50837
A Stored Cross-Site Scripting (XSS) vulnerability exists in the KASHIPARA E-learning Management System Project 1.0 . The flaw is located in the /admin/admin_user.php file, where the application fails to properly neutralize input during web page generation. Specifically, remote attackers can execu...
CVE-2024-50835
A SQL Injection vulnerability was found in /admin/editstudent.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parameters...
CVE-2024-50834
A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters...
CVE-2024-50836
A Stored Cross-Site Scripting XSS vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and lastname parameters...
CVE-2024-50832
A SQL Injection vulnerability was found in /admin/editclass.php in kashipara E-learning Management System Project 1.0 via the classname parameter...
CVE-2024-50826
A SQL Injection vulnerability was found in /admin/addcontent.php in kashipara E-learning Management System Project 1.0 via the title and content parameters...
CVE-2024-50827
A SQL Injection vulnerability was found in /admin/addsubject.php in kashipara E-learning Management System Project 1.0 via the subjectcode parameter...