Lucene search

K
LopalopaMusic Management System

5 matches found

CVE
CVE
added 2024/09/16 8:15 p.m.38 views

CVE-2024-42798

An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_user in Kashipara Music Management System v1.0. This allows a low privileged attacker to take over the administrator account.

7.6CVSS6.9AI score0.00132EPSS
CVE
CVE
added 2024/09/25 1:15 a.m.36 views

CVE-2024-42797

An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music playlist entries.

9.8CVSS7AI score0.00774EPSS
CVE
CVE
added 2024/09/16 8:15 p.m.33 views

CVE-2024-42795

An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_user&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to view valid user details.

4.2CVSS6.6AI score0.00042EPSS
CVE
CVE
added 2024/09/16 8:15 p.m.30 views

CVE-2024-42796

An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music genre entries.

5.9CVSS6.6AI score0.00046EPSS
CVE
CVE
added 2024/09/16 8:15 p.m.27 views

CVE-2024-42794

Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax.php?action=save_user.

4.7CVSS7.1AI score0.00144EPSS