854 matches found
Kashipara E-learning Management System 安全漏洞
Kashipara E-learning Management System is a learning management system from Kashipara Inc. A security vulnerability exists in Kashipara E-learning Management System version 1.0 that stems from vulnerability to a stored cross-site scripting attack, which allows remote attackers to execute arbitrar...
Kashipara E-learning Management System 安全漏洞
Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System version 1.0, which is caused by an SQL injection in the parameter classname...
Kashipara E-learning Management System 跨站脚本漏洞
Kashipara E-learning Management System is a learning management system from Kashipara Inc. A cross-site scripting vulnerability exists in Kashipara E-learning Management System version 1.0, which is rooted in a stored cross-site scripting attack that allows remote attackers to execute arbitrary...
Kashipara E-learning Management System 跨站脚本漏洞
Kashipara E-learning Management System is a learning management system from Kashipara Inc. A cross-site scripting vulnerability exists in Kashipara E-learning Management System version 1.0, which is rooted in a stored cross-site scripting attack that allows a remote attacker to execute arbitrary...
CVE-2024-50833
Summary: CVE-2024-50833 is a SQL Injection in the KASHIPARA E-learning Management System Project 1.0, exploitable via /login.php using the username and password parameters. The vulnerability affects version 1.0 of the system and is described across multiple feeds, with a high-severity impact (NVD...
PT-2024-34431 · Unknown · Kashipara E-Learning Management System Project
Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /login.php file of the KASHIPARA E-learning Management System Project. The issue is related to the username and password parameters...
CVE-2024-50839
A Stored Cross-Site Scripting (XSS) vulnerability exists in the KASHIPARA E-learning Management System Project version 1.0 . The flaw is located within the /admin/add_subject.php and /lms/admin/add_subject.php API endpoints, where the application fails to properly sanitize the subject_code and ti...
CVE-2024-50838
A Stored Cross-Site Scripting XSS vulnerability was found in /admin/department.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the d and pi parameters...
CVE-2024-50838
A Stored Cross-Site Scripting (XSS) vulnerability exists in the KASHIPARA E-learning Management System Project version 1.0 . The flaw is located in the /admin/department.php file, where remote attackers can execute arbitrary scripts by exploiting the d and pi parameters. While the CNNVD document ...
CVE-2024-50837
A Stored Cross-Site Scripting XSS vulnerability was found in /admin/adminuser.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and username parameters...
CVE-2024-50837
A Stored Cross-Site Scripting (XSS) vulnerability exists in the KASHIPARA E-learning Management System Project 1.0 . The flaw is located in the /admin/admin_user.php file, where the application fails to properly neutralize input during web page generation. Specifically, remote attackers can execu...
CVE-2024-50835
A SQL Injection vulnerability was found in /admin/editstudent.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parameters...
CVE-2024-50834
A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters...
CVE-2024-50836
A Stored Cross-Site Scripting XSS vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and lastname parameters...
CVE-2024-50834
The CVE-2024-50834 issue affects KASHIPARA E-learning Management System Project 1.0. A SQL Injection vulnerability exists in /admin/teachers.php exploitable via the firstname and lastname parameters, as documented by multiple sources. Root cause: improper handling of user-supplied input in these ...
CVE-2024-50835
CVE-2024-50835 is a SQL injection vulnerability in Kashipara E-learning Management System Project 1.0, exploitable via /admin/edit_student.php using the cys, un, ln, fn, and id parameters. The NVD entry lists CVSSv3.1/7.2 HIGH (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H); a CNA entry shows a conflicting...
CVE-2024-50832
A SQL Injection vulnerability was found in /admin/editclass.php in kashipara E-learning Management System Project 1.0 via the classname parameter...
CVE-2024-50826
A SQL Injection vulnerability was found in /admin/addcontent.php in kashipara E-learning Management System Project 1.0 via the title and content parameters...