Kashipara Food Management System SQL Injection Vulnerability

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in Kashipara Food Management System version 1.0, which originates from a lack of validation of externally entered SQL statements in the id parameter of the addmaterialedit.php file, a...

Kashipara Food Management System Cross-Site Scripting Vulnerability (CNVD-2024-13476)

Kashipara Food Management System is a food management system from Kashipara. A cross-site scripting vulnerability exists in version 1.0 of the Kashipara Food Management System, which stems from the lack of effective filtering and escaping of user-supplied data in the partyaddress parameter of the...

CVE-2024-0307

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginprocess.php. The manipulation of the argument password leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2024-0307

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginprocess.php. The manipulation of the argument password leads to sql injection. The attack can be initiated remotely. The explo...

Sql injection

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginprocess.php. The manipulation of the argument password leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2024-0307 Kashipara Dynamic Lab Management System login_process.php sql injection

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginprocess.php. The manipulation of the argument password leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2024-0307

CVE-2024-0307 affects Kashipara Dynamic Lab Management System v1.0 and earlier, via SQL injection in login_process.php caused by manipulation of the password argument. The vulnerability enables remote exploitation and has public exploits. Connected sources corroborate the affected file and vulner...

CVE-2024-0307 Kashipara Dynamic Lab Management System login_process.php sql injection

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginprocess.php. The manipulation of the argument password leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2024-0306

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adminloginprocess.php. The manipulation of the argument adminpassword leads to sql injection. It is possible to initiate the attack...

CVE-2024-0306

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adminloginprocess.php. The manipulation of the argument adminpassword leads to sql injection. It is possible to initiate the attack...

Sql injection

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adminloginprocess.php. The manipulation of the argument adminpassword leads to sql injection. It is possible to initiate the attack...

CVE-2024-0306 Kashipara Dynamic Lab Management System admin_login_process.php sql injection

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adminloginprocess.php. The manipulation of the argument adminpassword leads to sql injection. It is possible to initiate the attack...

CVE-2024-0306 Kashipara Dynamic Lab Management System admin_login_process.php sql injection

A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adminloginprocess.php. The manipulation of the argument adminpassword leads to sql injection. It is possible to initiate the attack...

CVE-2024-0306

CVE-2024-0306 affects Kashipara Dynamic Lab Management System (versions up to 1.0). The vulnerability is an SQL injection in the file /admin/admin_login_process.php caused by manipulation of the admin_password argument. It can be exploited remotely and the exploit has been publicly disclosed. Imp...

CVE-2024-0290

A vulnerability, which was classified as critical, has been found in Kashipara Food Management System 1.0. This issue affects some unknown processing of the file stockedit.php. The manipulation of the argument itemtype leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2024-0290

A vulnerability, which was classified as critical, has been found in Kashipara Food Management System 1.0. This issue affects some unknown processing of the file stockedit.php. The manipulation of the argument itemtype leads to sql injection. The attack may be initiated remotely. The exploit has...

Sql injection

A vulnerability, which was classified as critical, has been found in Kashipara Food Management System 1.0. This issue affects some unknown processing of the file stockedit.php. The manipulation of the argument itemtype leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2024-0290 Kashipara Food Management System stock_edit.php sql injection

A vulnerability, which was classified as critical, has been found in Kashipara Food Management System 1.0. This issue affects some unknown processing of the file stockedit.php. The manipulation of the argument itemtype leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2024-0290

CVE-2024-0290 affects Kashipara Food Management System 1.0. The SQL injection is triggered in stock_edit.php via the item_type parameter due to lack of input validation, exploitable over network with remote access. Exploit has been disclosed publicly; potential impact is data theft/alteration of ...

CVE-2024-0290 Kashipara Food Management System stock_edit.php sql injection

A vulnerability, which was classified as critical, has been found in Kashipara Food Management System 1.0. This issue affects some unknown processing of the file stockedit.php. The manipulation of the argument itemtype leads to sql injection. The attack may be initiated remotely. The exploit has...