Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
LopalopaE-learning Management System

15 matches found

CVE
CVE•added 2024/12/09 3:15 p.m.•64 views

CVE-2024-54920

A SQL Injection vulnerability was found in /teacher_signup.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the firstname, lastname, and class_id parameters.

9.8CVSS8.4AI score0.00298EPSS
CVE
CVE•added 2024/12/09 7:15 p.m.•63 views

CVE-2024-54924

A SQL Injection was found in /admin/edit_content.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the title and content parameters.

9.8CVSS9.1AI score0.00298EPSS
CVE
CVE•added 2024/12/09 7:15 p.m.•61 views

CVE-2024-54918

Kashipara E-learning Management System v1.0 is vulnerable to Remote Code Execution via File Upload in /teacher_avatar.php.

9.8CVSS7.8AI score0.02315EPSS
CVE
CVE•added 2024/12/09 7:15 p.m.•58 views

CVE-2024-54923

A SQL Injection vulnerability was found in /admin/edit_teacher.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the department parameter.

9.8CVSS9.1AI score0.00298EPSS
CVE
CVE•added 2024/12/09 7:15 p.m.•57 views

CVE-2024-54921

A SQL Injection was found in /student_signup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username, firstname, lastname, and class_id parameters.

9.8CVSS9.1AI score0.00298EPSS
CVE
CVE•added 2024/12/09 7:15 p.m.•57 views

CVE-2024-54925

A SQL Injection was found in /remove_sent_message.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id parameter.

9.8CVSS9.1AI score0.00298EPSS
CVE
CVE•added 2024/12/09 6:15 p.m.•52 views

CVE-2024-54922

A SQL Injection was found in /admin/edit_user.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the firstname, lastname, and username parameters.

9.8CVSS8.4AI score0.00282EPSS
CVE
CVE•added 2024/12/09 6:15 p.m.•50 views

CVE-2024-54933

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_content.php.

9.8CVSS8.1AI score0.00095EPSS
CVE
CVE•added 2024/12/09 7:15 p.m.•47 views

CVE-2024-54931

A SQL Injection was found in /admin/delete_event.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id parameter.

9.8CVSS9.1AI score0.00219EPSS
CVE
CVE•added 2024/12/09 6:15 p.m.•45 views

CVE-2024-54930

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_student.php.

9.8CVSS8.1AI score0.0007EPSS
CVE
CVE•added 2024/12/09 7:15 p.m.•45 views

CVE-2024-54934

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_class.php.

9.8CVSS8.1AI score0.00101EPSS
CVE
CVE•added 2024/11/14 6:15 p.m.•42 views

CVE-2024-50823

A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and password parameters.

9.8CVSS8AI score0.00056EPSS
CVE
CVE•added 2024/12/09 7:15 p.m.•41 views

CVE-2024-54932

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_department.php.

9.8CVSS8.1AI score0.00074EPSS
CVE
CVE•added 2024/12/09 5:15 p.m.•40 views

CVE-2024-54926

A SQL Injection vulnerability was found in /search_class.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the school_year parameter.

9.8CVSS8.9AI score0.0029EPSS
CVE
CVE•added 2024/11/14 5:15 p.m.•35 views

CVE-2024-50833

A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the username and password parameters.

9.8CVSS8.6AI score0.00056EPSS