84 matches found
CVE-2025-51567
A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the rname, rcollage, rnumber, rgender and rpassword parameters in a POST HTTP request...
CVE-2025-51567
A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the rname, rcollage, rnumber, rgender and rpassword parameters in a POST HTTP request...
PT-2026-2298
Name of the Vulnerable Software and Affected Versions kashipara Online Exam System version 1.0 Description A SQL Injection issue exists in the /exam/user/profile.php page. This allows remote attackers to execute arbitrary SQL commands and gain unauthorized database access. The issue is triggered...
CVE-2025-51567: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the rname, rcollage, rnumber, rgender and rpassword parameters in a POST HTTP request...
CVE-2025-51567
A SQL Injection vulnerability exists in the kashipara Online Exam System V1.0 within the /exam/user/profile.php page. The root cause is the use of unvalidated parameters —specifically rname, rcollage, rnumber, rgender, and rpassword—in a POST HTTP request . This flaw allows remote attackers to ex...
EUVD-2025-13458
Malicious code in bioql PyPI...
EUVD-2025-13466
Malicious code in bioql PyPI...
EUVD-2024-38469
Malicious code in bioql PyPI...
EUVD-2024-38471
Malicious code in bioql PyPI...
EUVD-2025-4150
Malicious code in bioql PyPI...
CVE-2025-5214
A vulnerability was found in Kashipara Responsive Online Learing Platform 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /courses/coursedetailusernew.php. The manipulation of the argument ID leads to sql injection. The attack may be launched...
CVE-2025-5214 Kashipara Responsive Online Learing Platform course_detail_user_new.php sql injection
A vulnerability was found in Kashipara Responsive Online Learing Platform 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /courses/coursedetailusernew.php. The manipulation of the argument ID leads to sql injection. The attack may be launched...
CVE-2024-4069
A vulnerability, which was classified as critical, was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file search.php. The manipulation of the argument txtSearch leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-4075
A vulnerability classified as problematic has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file login.php. The manipulation of the argument txtAddress leads to cross site scripting. It is possible to initiate the attack remotely. The...
CVE-2024-40480
A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam System v1.0, which allows remote unauthenticated attackers to view administrator dashboard and delete valid user accounts via the direct URL access...
CVE-2024-40479
A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the "eid" parameter...
CVE-2024-40478
A Stored Cross Site Scripting XSS vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1.0, which allows remote attackers to execute arbitrary code via "rname" and "email" parameter fields...
CVE-2025-45320
A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0...