live_membership_system vulnerabilities
4 known vulnerabilities in live_membership_system from Kashipara. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
live_membership_system: Cross-Site Request Forgery
A Cross-Site Request Forgery (CSRF) vulnerability was found in the Kashipara Live Membership System v1.0. This could lead to an attacker tricking the administrator into deleting valid member data via a crafted HTML page, as demonstrated by a Delete Member acti
- 7.6 High severity
live_membership_system: Improper Control of Generation of Code
A Stored Cross Site Scripting (XSS) vulnerability was found in "/view_type.php" of Kashipara Live Membership System v1.0, which allows remote attackers to execute arbitrary code via membershipType parameter.
- 9.8 Critical severity
live_membership_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email or password Login parameters.
- 9.8 Critical severity
live_membership_system: Improper Neutralization of Input During Web Page Generation
An Unrestricted file upload vulnerability was found in "/Membership/edit_member.php" of Kashipara Live Membership System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file.