CVE-2025-45322

Kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter. The root cause is an unvalidated/unsafely constructed input in the CheckStatus.php path, enabling an attacker to inject SQL. Public references (NVD/Red Hat/C...

CVE-2025-45320

CVE-2025-45320 : A directory listing vulnerability exists in Kashipara Online Service Management Portal v1.0, triggered by mishandling of the /osms/Requester/ directory. This can allow disclosure of directory contents and metadata, impacting confidentiality. Exploitation is not reported in the pr...

CVE-2025-45321

Kashipara Online Service Management Portal V1.0 is affected by a SQL Injection in the /osms/Requester/Requesterchangepass.php endpoint, exploited via the rPassword parameter. The underlying cause is improper handling of this parameter, enabling an attacker to perform injection attacks. CVSS v3.1 ...