1331 matches found
CVE-2024-42797
An Incorrect Access Control vulnerability was found in /music/ajax.php?action=deleteplaylist in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music playlist entries...
CVE-2024-42797
CVE-2024-42797 affects Kashipara Music Management System v1.0. Affects the endpoint /music/ajax.php?action=delete_playlist where an Incorrect Access Control flaw allows an unauthenticated attacker to delete valid music playlist entries. Documents do not provide a patch version or explicit remedia...
PT-2024-30170 · Unknown · Kashipara Music Management System
Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: An Incorrect Access Control issue was found in the "/music/ajax.php?action=delete playlist" endpoint. This issue allows an unauthenticated attacker to delete valid music playlist...
CVE-2024-42797
An Incorrect Access Control vulnerability was found in /music/ajax.php?action=deleteplaylist in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music playlist entries...
Online Food Management System 1.0 SQL Injection
==================================================================================================================================== | Title : Online Food Management System 1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 6...
CVE-2024-42795
An Incorrect Access Control vulnerability was found in /music/viewuser.php?id=3 and /music/controller.php?page=edituser&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to view valid user details...
CVE-2024-42795
An Incorrect Access Control vulnerability was found in /music/viewuser.php?id=3 and /music/controller.php?page=edituser&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to view valid user details...
CVE-2024-42794
Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax.php?action=saveuser...
CVE-2024-42794
Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax.php?action=saveuser...
CVE-2024-42798
An Incorrect Access Control vulnerability was found in /music/index.php?page=userlist and /music/index.php?page=edituser in Kashipara Music Management System v1.0. This allows a low privileged attacker to take over the administrator account...
Kashipara Music Management System 安全漏洞
Kashipara Music Management System is a music management system from Kashipara. A security vulnerability exists in Kashipara Music Management System version v1.0 that stems from an access control error...
CVE-2024-42794
Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control in the /music/ajax.php?action=save_user endpoint. The root cause is an access-control flaw that may allow unauthorized actions via the save_user function, potentially enabling account-related manipulation. Public ref...
CVE-2024-42795
An Incorrect Access Control vulnerability was found in /music/viewuser.php?id=3 and /music/controller.php?page=edituser&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to view valid user details...
Kashipara Music Management System 安全漏洞
Kashipara Music Management System is a music management system from Kashipara. A security vulnerability exists in Kashipara Music Management System version v1.0 that stems from an access control error...
CVE-2024-42795
An Incorrect Access Control vulnerability was found in /music/viewuser.php?id=3 and /music/controller.php?page=edituser&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to view valid user details...
CVE-2024-42796
CVE-2024-42796 affects Kashipara Music Management System v1.0. The issue is an Incorrect Access Control in the /music/ajax.php?action=delete_genre endpoint, allowing an unauthenticated attacker to delete valid music genre entries. Exploitation details are not provided in the available documents. ...
PT-2024-30171 · Unknown · Kashipara Music Management System
Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: An Incorrect Access Control vulnerability was found in "/music/index.php?page=user list" and "/music/index.php?page=edit user" in Kashipara Music Management System. This allows a low...
CVE-2024-42795
Kashipara Music Management System v1.0 contains an Incorrect Access Control flaw exposed via /music/view_user.php?id=3 and /music/controller.php?page=edit_user&id=3, allowing an unauthenticated attacker to view valid user details. This aligns with CVE-2024-42795. Affected components are the view_...
Kashipara Music Management System 安全漏洞
Kashipara Music Management System is a music management system from Kashipara. A security vulnerability exists in Kashipara Music Management System version v1.0, which stems from faulty access control in /music/ajax.php?action=deletegenre, which could allow an unauthenticated attacker to delete...
CVE-2024-42798
An Incorrect Access Control vulnerability was found in /music/index.php?page=userlist and /music/index.php?page=edituser in Kashipara Music Management System v1.0. This allows a low privileged attacker to take over the administrator account...