Lucene search
+L

506 matches found

Cvelist
Cvelist
•added 2024/12/09 12:00 a.m.•35 views

CVE-2024-54931

A SQL Injection was found in /admin/deleteevent.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id parameter...

0.006EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•13 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0. An attacker can exploit the vulnerability to access the database by executing arbitrary SQL commands via the title and content...

9.8CVSS7.6AI score0.006EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•14 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0. An attacker can exploit this vulnerability to execute arbitrary Java script via the filename parameter...

5.4CVSS7.3AI score0.00315EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•15 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0. An attacker can exploit this vulnerability to execute arbitrary scripts via the mymessage parameter...

5.4CVSS7.2AI score0.0039EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•17 views

PT-2024-36442 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System version 1.0 Description: A SQL injection issue was found in the /admin/edit content.php endpoint, allowing remote attackers to execute arbitrary SQL commands and gain unauthorized access to the database...

9.8CVSS8.6AI score0.006EPSS
SaveExploits1References5
CVE
CVE
•added 2024/12/09 12:00 a.m.•93 views

CVE-2024-54931

A SQL Injection vulnerability exists in the kashipara E-learning Management System v1.0 within the /admin/delete_event.php endpoint. The root cause is the improper neutralization of special elements used in an SQL command via the id parameter. This flaw allows remote attackers to execute arbitrar...

9.8CVSS9.1AI score0.006EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•13 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0. An attacker can exploit the vulnerability to access the database by executing arbitrary SQL commands via the firstname, lastname,...

9.8CVSS7.5AI score0.00579EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/12/09 12:00 a.m.•35 views

CVE-2024-54925

A SQL Injection was found in /removesentmessage.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id parameter...

0.006EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•20 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0. An attacker can exploit this vulnerability to gain unauthorized access to the database by executing arbitrary SQL commands via the...

9.8CVSS7.7AI score0.006EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/12/09 12:00 a.m.•14 views

CVE-2024-54930

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/deletestudent.php...

8AI score0.00493EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•11 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0, which originates from an SQL injection vulnerability in /admin/deletesubject.php...

7.2CVSS7.9AI score0.00508EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/12/09 12:00 a.m.•41 views

CVE-2024-54930

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/deletestudent.php...

0.00493EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•15 views

PT-2024-36441 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: Kashipara E-learning Management System version 1.0 Description: A SQL injection issue was found in the /admin/edit teacher.php endpoint, allowing remote attackers to execute arbitrary SQL commands and gain unauthorized access to the database...

9.8CVSS8.6AI score0.006EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/12/09 12:00 a.m.•37 views

CVE-2024-54932

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/deletedepartment.php...

0.0051EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/11/15 12:00 a.m.•18 views

Chamilo LMS 安全漏洞

Chamilo LMS is an open source online learning and collaboration system from Chamilo Open Source. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS version v.1.11.26, which stems fro...

5.4CVSS6.8AI score0.00344EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/14 6:15 p.m.•13 views

CVE-2024-50826

A SQL Injection vulnerability was found in /admin/addcontent.php in kashipara E-learning Management System Project 1.0 via the title and content parameters...

7.2CVSS5.8AI score0.00384EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/14 6:15 p.m.•15 views

CVE-2024-50823

A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and password parameters...

9.8CVSS5.8AI score0.00488EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/14 5:15 p.m.•16 views

CVE-2024-50835

A SQL Injection vulnerability was found in /admin/editstudent.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parameters...

7.2CVSS5.8AI score0.00588EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/14 5:15 p.m.•11 views

CVE-2024-50832

A SQL Injection vulnerability was found in /admin/editclass.php in kashipara E-learning Management System Project 1.0 via the classname parameter...

7.2CVSS5.8AI score0.00588EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/14 3:15 p.m.•13 views

CVE-2024-50837

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/adminuser.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and username parameters...

5.4CVSS6AI score0.00475EPSS
SaveExploits1References1
Rows per page
Query Builder