CVE-2024-54926

A SQL Injection vulnerability was found in /searchclass.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the schoolyear parameter...

CVE-2024-54926

A SQL Injection vulnerability exists in the kashipara E-learning Management System v1.0 within the /search_class.php file. The root cause is the improper neutralization of special elements used in an SQL command via the school_year parameter. This allows remote attackers to execute arbitrary SQL ...

CVE-2024-54922

A SQL Injection vulnerability exists in the kashipara E-learning Management System v1.0 within the /admin/edit_user.php file. Remote attackers can exploit the firstname, lastname, and username parameters to execute arbitrary SQL commands, leading to unauthorized database access and the exposure o...

CVE-2024-54925

A SQL Injection was found in /removesentmessage.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id parameter...

CVE-2024-54925

The kashipara E-learning Management System v1.0 is vulnerable to a SQL Injection flaw within the /remove_sent_message.php file. This vulnerability is caused by improper neutralization of special elements in the id parameter, which allows remote attackers to execute arbitrary SQL commands. Success...

CVE-2024-54931

A SQL Injection vulnerability exists in the kashipara E-learning Management System v1.0 within the /admin/delete_event.php endpoint. The root cause is the improper neutralization of special elements used in an SQL command via the id parameter. This flaw allows remote attackers to execute arbitrar...

CVE-2024-54924

A SQL Injection vulnerability exists in the kashipara E-learning Management System v1.0 within the /admin/edit_content.php endpoint. The flaw allows remote attackers to execute arbitrary SQL commands to obtain unauthorized database access by manipulating the title and content parameters. While no...

CVE-2024-54921

A SQL Injection was found in /studentsignup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username, firstname, lastname, and classid parameters...

CVE-2024-54923

A SQL Injection vulnerability was found in /admin/editteacher.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the department parameter...

CVE-2024-54924

A SQL Injection was found in /admin/editcontent.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the title and content parameters...

CVE-2024-54920

A SQL Injection vulnerability was found in /teachersignup.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the firstname, lastname, and classid parameters...

CVE-2024-54931: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection was found in /admin/deleteevent.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id parameter...

CVE-2024-54925: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection was found in /removesentmessage.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id parameter...

CVE-2024-54923: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /admin/editteacher.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the department parameter...

CVE-2024-54921: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection was found in /studentsignup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username, firstname, lastname, and classid parameters...

CVE-2024-54922: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection was found in /admin/edituser.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the firstname, lastname, and username parameters...

CVE-2024-54926: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /searchclass.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the schoolyear parameter...

CVE-2024-54920: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /teachersignup.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the firstname, lastname, and classid parameters...

PT-2024-36439

Name of the Vulnerable Software and Affected Versions Kashipara E-learning Management System version 1.0 Description A SQL Injection issue was discovered in the /student signup.php file, allowing remote attackers to execute arbitrary SQL commands and gain unauthorized database access. The usernam...

PT-2024-36442 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System version 1.0 Description: A SQL injection issue was found in the /admin/edit content.php endpoint, allowing remote attackers to execute arbitrary SQL commands and gain unauthorized access to the database...