CVE-2025-45322

The kashipara Online Service Management Portal V1.0 is vulnerable to an SQL Injection flaw within the osms/Requester/CheckStatus.php file. The vulnerability is caused by an unvalidated checkid parameter, which could allow an attacker to perform an SQL injection attack. To mitigate this risk, it i...

CVE-2025-45320

The Kashipara Online Service Management Portal V1.0 is susceptible to a Directory Listing Vulnerability due to the mishandling of the /osms/Requester/ directory. This flaw could allow an attacker to view the contents of the directory, leading to the disclosure of sensitive information. To mitigat...

CVE-2025-45321

Kashipara Online Service Management Portal V1.0 is affected by a SQL Injection in the /osms/Requester/Requesterchangepass.php endpoint, exploited via the rPassword parameter. The underlying cause is improper handling of this parameter, enabling an attacker to perform injection attacks. CVSS v3.1 ...