Записи lopalopa
112 опубликованных записей вендора lopalopa.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 22
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')54
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')27
- CWE-284 Improper Access Control14
- CWE-434 Unrestricted Upload of File with Dangerous Type5
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3
- CWE-352 Cross-Site Request Forgery (CSRF)3
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
112 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
39Наблюдать | CVE-2024-40482Эксплойта нет | An Unrestricted file upload vulnerability was found in "/Membership/edit_member.php" of Kashipara Live Membership System v1.0, which allows lopalopa · live membership system · CWE-79 | Критическая9,8 | — | 1,2 % | 12 авг. 2024 г. |
39Наблюдать | CVE-2024-40486Эксплойта нет | A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execute arbitrary SQL commlopalopa · live membership system · CWE-89 | Критическая9,8 | — | 1,0 % | 12 авг. 2024 г. |
39Наблюдать | CVE-2024-54918Эксплойта нет | Kashipara E-learning Management System v1.0 is vulnerable to Remote Code Execution via File Upload in /teacher_avatar.php.lopalopa · e-learning management system · CWE-434 | Критическая9,8 | — | 0,9 % | 9 дек. 2024 г. |
39Наблюдать | CVE-2024-42777Эксплойта нет | An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management System v1.0, which allolopalopa · music management system · CWE-434 | Критическая9,8 | — | 0,7 % | 21 авг. 2024 г. |
39Наблюдать | CVE-2024-42781Эксплойта нет | A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote attackers to executelopalopa · music management system · CWE-89 | Критическая9,8 | — | 0,7 % | 21 авг. 2024 г. |
39Наблюдать | CVE-2024-50833Эксплойта нет | A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the username and password palopalopa · e-learning management system · CWE-89 | Критическая9,8 | — | 0,6 % | 14 нояб. 2024 г. |
39Наблюдать | CVE-2024-42784Эксплойта нет | A SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music Management System v1.0 allows an attacker to exelopalopa · music management system · CWE-89 | Критическая9,8 | — | 0,6 % | 21 авг. 2024 г. |
39Наблюдать | CVE-2024-54925Эксплойта нет | A SQL Injection was found in /remove_sent_message.php in kashipara E-learning Management System v1.0, which allows remote attackers to execulopalopa · e-learning management system · CWE-89 | Критическая9,8 | — | 0,6 % | 9 дек. 2024 г. |
39Наблюдать | CVE-2024-54924Эксплойта нет | A SQL Injection was found in /admin/edit_content.php in kashipara E-learning Management System v1.0, which allows remote attackers to executlopalopa · e-learning management system · CWE-89 | Критическая9,8 | — | 0,6 % | 9 дек. 2024 г. |
39Наблюдать | CVE-2024-54923Эксплойта нет | A SQL Injection vulnerability was found in /admin/edit_teacher.php in kashipara E-learning Management System v1.0, which allows remote attaclopalopa · e-learning management system · CWE-89 | Критическая9,8 | — | 0,6 % | 9 дек. 2024 г. |
39Наблюдать | CVE-2024-54931Эксплойта нет | A SQL Injection was found in /admin/delete_event.php in kashipara E-learning Management System v1.0, which allows remote attackers to executlopalopa · e-learning management system · CWE-89 | Критическая9,8 | — | 0,6 % | 9 дек. 2024 г. |
39Наблюдать | CVE-2024-54921Эксплойта нет | A SQL Injection was found in /student_signup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arlopalopa · e-learning management system · CWE-89 | Критическая9,8 | — | 0,6 % | 9 дек. 2024 г. |
39Наблюдать | CVE-2024-54920Эксплойта нет | A SQL Injection vulnerability was found in /teacher_signup.php of kashipara E-learning Management System v1.0, which allows remote attackerslopalopa · e-learning management system · CWE-89 | Критическая9,8 | — | 0,6 % | 9 дек. 2024 г. |
39Наблюдать | CVE-2024-41237Эксплойта нет | A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to executelopalopa · responsive school management system · CWE-89 | Критическая9,8 | — | 0,6 % | 7 авг. 2024 г. |
39Наблюдать | CVE-2024-42797Эксплойта нет | An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Music Management System v1.0.lopalopa · music management system · CWE-284 | Критическая9,8 | — | 0,6 % | 24 сент. 2024 г. |
39Наблюдать | CVE-2024-54934Эксплойта нет | Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_class.php.lopalopa · e-learning management system · CWE-89 | Критическая9,8 | — | 0,5 % | 9 дек. 2024 г. |
39Наблюдать | CVE-2024-54932Эксплойта нет | Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_department.php.lopalopa · e-learning management system · CWE-89 | Критическая9,8 | — | 0,5 % | 9 дек. 2024 г. |
39Наблюдать | CVE-2024-50823Эксплойта нет | A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and passwlopalopa · e-learning management system · CWE-89 | Критическая9,8 | — | 0,5 % | 14 нояб. 2024 г. |
39Наблюдать | CVE-2024-42782Эксплойта нет | A SQL injection vulnerability in "/music/ajax.php?action=find_music" in Kashipara Music Management System v1.0 allows an attacker to executelopalopa · music management system · CWE-89 | Критическая9,8 | — | 0,5 % | 21 авг. 2024 г. |
39Наблюдать | CVE-2024-42783Эксплойта нет | Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php.lopalopa · music management system · CWE-89 | Критическая9,8 | — | 0,4 % | 21 авг. 2024 г. |
35Наблюдать | CVE-2024-42780Эксплойта нет | An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_genre" in Kashipara Music Management System v1.0.lopalopa · music management system · CWE-434 | Высокая8,8 | — | 0,8 % | 21 авг. 2024 г. |
35Наблюдать | CVE-2024-42778Эксплойта нет | An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0.lopalopa · music management system · CWE-434 | Высокая8,8 | — | 0,8 % | 21 авг. 2024 г. |
35Наблюдать | CVE-2024-42779Эксплойта нет | An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0.lopalopa · music management system · CWE-434 | Высокая8,8 | — | 0,8 % | 21 авг. 2024 г. |
35Наблюдать | CVE-2024-42791Эксплойта нет | A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=delete_genrlopalopa · music management system · CWE-79 | Высокая8,8 | — | 0,6 % | 26 авг. 2024 г. |
35Наблюдать | CVE-2024-54926Эксплойта нет | A SQL Injection vulnerability was found in /search_class.php of kashipara E-learning Management System v1.0, which allows remote attackers tlopalopa · e-learning management system · CWE-89 | Высокая8,8 | — | 0,6 % | 9 дек. 2024 г. |
- CVE-2024-4048239Наблюдать
An Unrestricted file upload vulnerability was found in "/Membership/edit_member.php" of Kashipara Live Membership System v1.0, which allows
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · live membership system12 авг. 2024 г.
- CVE-2024-4048639Наблюдать
A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execute arbitrary SQL comm
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · live membership system12 авг. 2024 г.
- CVE-2024-5491839Наблюдать
Kashipara E-learning Management System v1.0 is vulnerable to Remote Code Execution via File Upload in /teacher_avatar.php.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · e-learning management system9 дек. 2024 г.
- CVE-2024-4277739Наблюдать
An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management System v1.0, which allo
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · music management system21 авг. 2024 г.
- CVE-2024-4278139Наблюдать
A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote attackers to execute
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · music management system21 авг. 2024 г.
- CVE-2024-5083339Наблюдать
A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the username and password pa
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · e-learning management system14 нояб. 2024 г.
- CVE-2024-4278439Наблюдать
A SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music Management System v1.0 allows an attacker to exe
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · music management system21 авг. 2024 г.
- CVE-2024-5492539Наблюдать
A SQL Injection was found in /remove_sent_message.php in kashipara E-learning Management System v1.0, which allows remote attackers to execu
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · e-learning management system9 дек. 2024 г.
- CVE-2024-5492439Наблюдать
A SQL Injection was found in /admin/edit_content.php in kashipara E-learning Management System v1.0, which allows remote attackers to execut
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · e-learning management system9 дек. 2024 г.
- CVE-2024-5492339Наблюдать
A SQL Injection vulnerability was found in /admin/edit_teacher.php in kashipara E-learning Management System v1.0, which allows remote attac
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · e-learning management system9 дек. 2024 г.
- CVE-2024-5493139Наблюдать
A SQL Injection was found in /admin/delete_event.php in kashipara E-learning Management System v1.0, which allows remote attackers to execut
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · e-learning management system9 дек. 2024 г.
- CVE-2024-5492139Наблюдать
A SQL Injection was found in /student_signup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute ar
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · e-learning management system9 дек. 2024 г.
- CVE-2024-5492039Наблюдать
A SQL Injection vulnerability was found in /teacher_signup.php of kashipara E-learning Management System v1.0, which allows remote attackers
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · e-learning management system9 дек. 2024 г.
- CVE-2024-4123739Наблюдать
A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · responsive school management system7 авг. 2024 г.
- CVE-2024-4279739Наблюдать
An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Music Management System v1.0.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · music management system24 сент. 2024 г.
- CVE-2024-5493439Наблюдать
Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_class.php.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · e-learning management system9 дек. 2024 г.
- CVE-2024-5493239Наблюдать
Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_department.php.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %lopalopa · e-learning management system9 дек. 2024 г.
- CVE-2024-5082339Наблюдать
A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and passw
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %lopalopa · e-learning management system14 нояб. 2024 г.
- CVE-2024-4278239Наблюдать
A SQL injection vulnerability in "/music/ajax.php?action=find_music" in Kashipara Music Management System v1.0 allows an attacker to execute
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %lopalopa · music management system21 авг. 2024 г.
- CVE-2024-4278339Наблюдать
Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php.
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %lopalopa · music management system21 авг. 2024 г.
- CVE-2024-4278035Наблюдать
An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_genre" in Kashipara Music Management System v1.0.
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %lopalopa · music management system21 авг. 2024 г.
- CVE-2024-4277835Наблюдать
An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0.
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %lopalopa · music management system21 авг. 2024 г.
- CVE-2024-4277935Наблюдать
An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0.
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %lopalopa · music management system21 авг. 2024 г.
- CVE-2024-4279135Наблюдать
A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=delete_genr
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %lopalopa · music management system26 авг. 2024 г.
- CVE-2024-5492635Наблюдать
A SQL Injection vulnerability was found in /search_class.php of kashipara E-learning Management System v1.0, which allows remote attackers t
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %lopalopa · e-learning management system9 дек. 2024 г.