CVE-2024-50836: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and lastname parameters...

CVE-2024-50839

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/addsubject.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the subjectcode and title parameters...

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara Inc. A security vulnerability exists in Kashipara E-learning Management System version 1.0 that stems from vulnerability to a stored cross-site scripting attack, which allows remote attackers to execute arbitrar...

CVE-2024-50829: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /admin/editsubject.php in kashipara E-learning Management System Project 1.0 via the unit parameter...

CVE-2024-50825: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /admin/schoolyear.php in kashipara E-learning Management System Project 1.0 via the schoolyear parameter...

CVE-2024-50833: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the username and password parameters...

CVE-2024-50837

A Stored Cross-Site Scripting (XSS) vulnerability exists in the KASHIPARA E-learning Management System Project 1.0 . The flaw is located in the /admin/admin_user.php file, where the application fails to properly neutralize input during web page generation. Specifically, remote attackers can execu...

CVE-2024-50832: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /admin/editclass.php in kashipara E-learning Management System Project 1.0 via the classname parameter...

CVE-2024-50839: Buffer Copy without Checking Size of Input

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/addsubject.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the subjectcode and title parameters...

CVE-2024-50840: Buffer Copy without Checking Size of Input

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/class.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the classname parameter...

CVE-2024-50837: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/adminuser.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and username parameters...

CVE-2024-50836

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and lastname parameters...

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara Inc. A security vulnerability exists in Kashipara E-learning Management System version 1.0, which is caused by SQL injection of the parameters title and content...

CVE-2024-50839

A Stored Cross-Site Scripting (XSS) vulnerability exists in the KASHIPARA E-learning Management System Project version 1.0 . The flaw is located within the /admin/add_subject.php and /lms/admin/add_subject.php API endpoints, where the application fails to properly sanitize the subject_code and ti...

CVE-2024-50826

A SQL Injection vulnerability was found in /admin/addcontent.php in kashipara E-learning Management System Project 1.0 via the title and content parameters...

CVE-2024-50831: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection was found in /admin/adminuser.php in kashipara E-learning Management System Project 1.0 via the username and password parameters...

CVE-2024-50841: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/calendarofevents.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the datestart, dateend, and title parameters...

CVE-2024-50841

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/calendarofevents.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the datestart, dateend, and title parameters...

CVE-2024-50838

A Stored Cross-Site Scripting (XSS) vulnerability exists in KASHIPARA E-learning Management System Project version 1.0 . The flaw is located in the /admin/department.php file, where remote attackers can execute arbitrary scripts by manipulating the d and pi parameters. Additionally, other reports...

CVE-2024-50825

Kashipara E-learning Management System Project 1.0 contains a SQL Injection in /admin/school_year.php via the school_year parameter. The vulnerability affects the application’s ability to enforce data integrity and confidentiality, with potential impact on confidentiality, integrity, and availabi...