CVE-2024-50838: Buffer Copy without Checking Size of Input

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/department.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the d and pi parameters...

CVE-2024-50835: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /admin/editstudent.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parameters...

PT-2024-34429 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System Project version 1.0 Description: A SQL Injection issue was discovered in the /admin/admin user.php file of the kashipara E-learning Management System Project. This issue is exploitable via the username a...

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara Inc. A security vulnerability exists in Kashipara E-learning Management System version 1.0 that stems from vulnerability to a stored cross-site scripting attack, which allows remote attackers to execute arbitrar...

CVE-2024-50837

A Stored Cross-Site Scripting (XSS) vulnerability exists in the KASHIPARA E-learning Management System Project 1.0 . The flaw is located in the /admin/admin_user.php file, where the application fails to properly neutralize input during web page generation. Specifically, remote attackers can execu...

CVE-2024-50837

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/adminuser.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and username parameters...

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System version 1.0, which is caused by an SQL injection in the parameter subjectcode...

CVE-2024-50832: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /admin/editclass.php in kashipara E-learning Management System Project 1.0 via the classname parameter...

CVE-2024-50823

CVE-2024-50823 affects Kashipara E-learning Management System Project 1.0. A SQL injection vulnerability exists in the /admin/login.php endpoint, exploitable via the username and password parameters. The root cause is unparameterized SQL handling in the login routine, enabling an attacker to affe...

CVE-2024-50833

Summary: CVE-2024-50833 is a SQL Injection in the KASHIPARA E-learning Management System Project 1.0, exploitable via /login.php using the username and password parameters. The vulnerability affects version 1.0 of the system and is described across multiple feeds, with a high-severity impact (NVD...

CVE-2024-50827

CVE-2024-50827 affects Kashipara E-learning Management System Project 1.0. A SQL Injection vulnerability exists in /admin/add_subject.php via the subject_code parameter. The NVD entry lists a high impact (C/H/I/A) with a base score of 7.2 (3.1 vector: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). Red Hat...

CVE-2024-50828: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /admin/editdepartment.php in kashipara E-learning Management System Project 1.0 via the d parameter...

PT-2024-34439

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A Stored Cross-Site Scripting XSS issue was found in the /admin/class.php file, allowing remote attackers to execute arbitrary scripts via the class name parameter. This...

PT-2024-34431 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /login.php file of the KASHIPARA E-learning Management System Project. The issue is related to the username and password parameters...

CVE-2024-50841: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/calendarofevents.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the datestart, dateend, and title parameters...

CVE-2024-50829

CVE-2024-50829 describes a SQL injection in the Kashipara E-learning Management System Project 1.0. The vulnerability is triggered via the unit parameter in the endpoint /admin/edit_subject.php. Evidence from multiple sources (NVD, Red Hat, CVE lists) confirms the affected component and the injec...

CVE-2024-50834: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters...

Moodle SQL Injection Vulnerability (CNVD-2024-44850)

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from an SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements i...

JVN#31982676: MUSASI version 3 performing authentication on client-side

MUSASI provided by NEUMANN CO.LTD. is an e-learning system for driving schools. MUSASI version 3 performs authentication within the client-side code CWE-603, and the client in pre-authentication state retrieves the credential information from the server just when a user ID is input. This behavior...

SAP Enable Now Authorization Issues Vulnerability

SAP Enable Now is a collaborative content creation, management and sharing platform from SAP. The platform is primarily used for e-learning and training in SAP and non-SAP systems. SAP Enable Now suffers from an authorization issue vulnerability that stems from a lack of authorization checking,...