Kashipara vulnerabilities
We track 61 vulnerabilities in Kashipara products across 16 products. 61 are rated high or critical, and none are known to be exploited. The most recent was published on May 27, 2025.
Latest Kashipara vulnerabilities
- 8.8 High severity
College Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Kashipara College Management System 1.0. It has been classified as critical. Affected is an unknown function of the file submit_extracurricular_activity.php. The manipulation of the argument activity_datetime leads to sql injection
- 8.8 High severity
College Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Kashipara College Management System 1.0 and classified as critical. This issue affects some unknown processing of the file submit_new_faculty.php. The manipulation of the argument address leads to sql injection. The attack may be i
- 8.8 High severity
College Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Kashipara College Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file submit_student.php. The manipulation of the argument date_of_birth leads to sql injection. The attack can
- 8.8 High severity
College Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0. This affects an unknown part of the file view_each_faculty.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the
- 8.8 High severity
Online Furniture Shopping Ecommerce Website: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0 and classified as critical. This issue affects some unknown processing of the file prodInfo.php. The manipulation of the argument prodId leads to sql injection. The attack m
- 7.5 High severity
Online Furniture Shopping Ecommerce Website: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0 and classified as critical. This vulnerability affects unknown code of the file prodList.php. The manipulation of the argument prodType leads to sql injection. The atta
- 7.5 High severity
Online Furniture Shopping Ecommerce Website: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file search.php. The manipulation of the argument txtSearch leads to sql injection. It is possible to
- 9.8 Critical severity
Billing Software: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Kashipara Billing Software 1.0 and classified as critical. This issue affects some unknown processing of the file item_list_edit.php of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injec
- 9.8 Critical severity
Billing Software: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Kashipara Billing Software 1.0 and classified as critical. This vulnerability affects unknown code of the file party_submit.php of the component HTTP POST Request Handler. The manipulation of the argument party_name leads to s
- 9.8 Critical severity
Billing Software: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Kashipara Billing Software 1.0. This affects an unknown part of the file material_bill.php of the component HTTP POST Request Handler. The manipulation of the argument itemtypeid leads to sql inje
- 9.8 Critical severity
Billing Software: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Kashipara Billing Software 1.0. Affected by this issue is some unknown functionality of the file submit_delivery_list.php of the component HTTP POST Request Handler. The manipulation of the a
- 9.8 Critical severity
Billing Software: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Kashipara Billing Software 1.0. Affected by this vulnerability is an unknown functionality of the file buyer_detail_submit.php of the component HTTP POST Request Handler. The manipulation of the argument gstn
- 7.5 High severity
Dynamic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login_process.php. The manipulation of the argument password leads to sql injection. The attac
- 7.5 High severity
Dynamic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/admin_login_process.php. The manipulation of the argument admin_password leads to sql injection.
- 9.8 Critical severity
Food Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Kashipara Food Management System 1.0. This issue affects some unknown processing of the file stock_edit.php. The manipulation of the argument item_type leads to sql injection. The attack may
- 9.8 Critical severity
Food Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Kashipara Food Management System 1.0. This vulnerability affects unknown code of the file stock_entry_submit.php. The manipulation of the argument itemype leads to sql injection. The attack can be initiated r
- 9.8 Critical severity
Food Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Kashipara Food Management System 1.0. This affects an unknown part of the file rawstock_used_damaged_submit.php. The manipulation of the argument product_name leads to sql injection. It is possible to in
- 9.8 Critical severity
Food Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Kashipara Food Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file itemBillPdf.php. The manipulation of the argument printid leads to sql injection. The attack may
- 9.8 Critical severity
Hospital Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Affected by this issue is some unknown functionality of the file registration.php. The manipulation of the argument name/email/pass/gender/age/
- 9.8 Critical severity
Hospital Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Kashipara Hospital Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component Parameter Handler. The manipulation of the argument email/pass
- 8.8 High severity
Online Notice Board System: Unrestricted Upload of File with Dangerous Type
Online Notice Board System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'f' parameter of user/update_profile_pic.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.