Kashipara vulnerabilities
We track 61 vulnerabilities in Kashipara products across 16 products. 61 are rated high or critical, and none are known to be exploited. The most recent was published on May 27, 2025.
Latest Kashipara vulnerabilities
- 9.8 Critical severity
Responsive Online Learing Platform: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Kashipara Responsive Online Learing Platform 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /courses/course_detail_user_new.php. The manipulation of the argument ID leads to sql
- 9.8 Critical severity
Online Notice Board: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in code-projects Online Notice Board up to 1.0 and classified as critical. This issue affects some unknown processing of the file /registration.php of the component Profile Picture Handler. The manipulation of the argument img leads t
- 7.2 High severity
e_learning_management_system_project: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara E-learning Management System Project 1.0 via the date_start, date_end, and title parameters.
- 7.2 High severity
e_learning_management_system_project: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/add_subject.php in kashipara E-learning Management System Project 1.0 via the subject_code parameter.
- 7.2 High severity
e_learning_management_system_project: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/add_content.php in kashipara E-learning Management System Project 1.0 via the title and content parameters.
- 7.2 High severity
e_learning_management_system_project: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/school_year.php in kashipara E-learning Management System Project 1.0 via the school_year parameter.
- 9.8 Critical severity
e_learning_management_system_project: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and password parameters.
- 7.2 High severity
e_learning_management_system_project: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parameters.
- 9.8 Critical severity
music_management_system: Improper Access Control
An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music playlist entries.
- 7.6 High severity
music_management_system: Improper Privilege Management
An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_user in Kashipara Music Management System v1.0. This allows a low privileged attacker to take over the administrator account.
- 8.0 High severity
music_management_system: Cross-Site Request Forgery
A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via a crafted request to the /music/ajax.php?action=save_user page.
- 7.2 High severity
responsive_school_management_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page
- 9.8 Critical severity
bus_ticket_reservation_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the "email" or "password" Login page parameters.
- 9.1 Critical severity
hotel_management_system: Incorrect Authorization
An Incorrect Access Control vulnerability was found in /admin/edit_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to edit the valid hotel room entries in the administrator section.
- 9.1 Critical severity
hotel_management_system: Improper Access Control
An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to add the valid hotel room entries in the administrator section via the direct URL access
- 7.5 High severity
hotel_management_system: Improper Privilege Management
An Incorrect Access Control vulnerability was found in /admin/delete_room.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to delete valid hotel room entries in the administrator section.
- 7.5 High severity
hotel_management_system: Improper Access Control
An Incorrect Access Control vulnerability was found in /admin/rooms.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to view valid hotel room entries in administrator section.
- 8.8 High severity
music_management_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in "/music/view_user.php" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter of View User Profile Page.
- 8.8 High severity
music_management_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in /music/index.php?page=view_playlist in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter.
- 9.8 Critical severity
music_management_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter.
- 9.8 Critical severity
music_management_system: Improper Neutralization of Special Elements used in an SQL Command
Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php. An attacker can execute arbitrary SQL commands via the "pid" parameter.
- 9.8 Critical severity
music_management_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in "/music/ajax.php?action=find_music" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "search" parameter.
- 9.8 Critical severity
music_management_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email parameter.
- 8.8 High severity
music_management_system: Unrestricted Upload of File with Dangerous Type
An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_genre" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file.
- 8.8 High severity
music_management_system: Unrestricted Upload of File with Dangerous Type
An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file.
- 9.8 Critical severity
music_management_system: Unrestricted Upload of File with Dangerous Type
An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file.
- 8.8 High severity
live_membership_system: Cross-Site Request Forgery
A Cross-Site Request Forgery (CSRF) vulnerability was found in the Kashipara Live Membership System v1.0. This could lead to an attacker tricking the administrator into deleting valid member data via a crafted HTML page, as demonstrated by a Delete Member acti
- 7.6 High severity
live_membership_system: Improper Control of Generation of Code
A Stored Cross Site Scripting (XSS) vulnerability was found in "/view_type.php" of Kashipara Live Membership System v1.0, which allows remote attackers to execute arbitrary code via membershipType parameter.
- 9.8 Critical severity
live_membership_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email or password Login parameters.
- 9.8 Critical severity
live_membership_system: Improper Neutralization of Input During Web Page Generation
An Unrestricted file upload vulnerability was found in "/Membership/edit_member.php" of Kashipara Live Membership System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file.
- 9.8 Critical severity
online_exam_system: Improper Access Control
A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam System v1.0, which allows remote unauthenticated attackers to view administrator dashboard and delete valid user accounts via the direct URL
- 8.1 High severity
online_exam_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the "eid" parameter.
- 9.8 Critical severity
responsive_school_management_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter.
- 8.8 High severity
College Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Kashipara College Management System 1.0. Affected is an unknown function of the file view_students_each_detail.php. The manipulation of the argument id leads to sql injection. It is possible to launch th
- 8.8 High severity
College Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0. Affected is an unknown function of the file delete_faculty.php. The manipulation of the argument id leads to sql injection. It is possible to launch the at
- 8.8 High severity
College Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Kashipara College Management System 1.0. This issue affects some unknown processing of the file delete_user.php. The manipulation of the argument id leads to sql injection. The attack may be
- 8.8 High severity
College Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Kashipara College Management System 1.0. This vulnerability affects unknown code of the file each_extracurricula_activities.php. The manipulation of the argument id leads to sql injection. The attack can be i
- 8.8 High severity
College Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Kashipara College Management System 1.0. This affects an unknown part of the file edit_faculty.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remot
- 8.8 High severity
College Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Kashipara College Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file edit_user.php. The manipulation of the argument id leads to sql injection. The attack may be l
- 8.8 High severity
College Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Kashipara College Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file submit_admin.php. The manipulation of the argument phone leads to sql injection. The