CVE-2024-42796: Improper Access Control

An Incorrect Access Control vulnerability was found in /music/ajax.php?action=deletegenre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music genre entries...

CVE-2024-42791: Improper Neutralization of Input During Web Page Generation

A Cross-Site Request Forgery CSRF vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=deletegenre...

CVE-2024-42791

A Cross-Site Request Forgery (CSRF) vulnerability exists in Kashipara Music Management System v1.0 within the /music/ajax.php?action=delete_genre endpoint. The flaw occurs because the system fails to adequately verify that requests originate from a trusted user, potentially allowing an attacker t...