KA
Vendor
Kashipara
169
CVEs
0
On KEV
0
New 30D
Products
CM8.8
College Management System
Kashipara
21 CVEs0 on KEV0 new
MM9.8
Music Management System
Kashipara
21 CVEs0 on KEV0 new
EL9.8
E Learning Management System Project
Kashipara
19 CVEs0 on KEV0 new
FM9.8
Food Management System
Kashipara
19 CVEs0 on KEV0 new
RS9.8
Responsive School Management System
Kashipara
16 CVEs0 on KEV0 new
BS9.8
Billing Software
Kashipara
13 CVEs0 on KEV0 new
HM9.1
Hotel Management System
Kashipara
8 CVEs0 on KEV0 new
OF8.8
Online Furniture Shopping Ecommerce Website
Kashipara
7 CVEs0 on KEV0 new
BT9.8
Bus Ticket Reservation System
Kashipara
6 CVEs0 on KEV0 new
TW9.8
Travel Website
Kashipara
6 CVEs0 on KEV0 new
ON9.8
Online Notice Board System
Kashipara
5 CVEs0 on KEV0 new
JP9.8
Job Portal
Kashipara
4 CVEs0 on KEV0 new
LM9.8
Live Membership System
Kashipara
4 CVEs0 on KEV0 new
EW6.5
Ecommerce Website
Kashipara
3 CVEs0 on KEV0 new
SI8.8
Student Information System
Kashipara
3 CVEs0 on KEV0 new
DL7.5
Dynamic Lab Management System
Kashipara
2 CVEs0 on KEV0 new
HM9.8
Hospital Management System
Kashipara
2 CVEs0 on KEV0 new
HM6.8
Hotel Management
Kashipara
2 CVEs0 on KEV0 new
OE9.8
Online Exam System
Kashipara
2 CVEs0 on KEV0 new
SM6.1
School Management System
Kashipara
2 CVEs0 on KEV0 new
EM7.5
E-commerce Management Software
Kashipara
1 CVEs0 on KEV0 new
OA5.6
Online Attendance Management System
Kashipara
1 CVEs0 on KEV0 new
RO9.8
Responsive Online Learing Platform
Kashipara
1 CVEs0 on KEV0 new
SM6.1
Society Management System Portal
Kashipara
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-26464 | SM Society Management System Portal Kashipara | 6.1 | Feb 23 | Stored Cross-Site Scripting (XSS) was found in the /admin/edit_user.php page of Society Management System Portal V1.0, which allows remote attackers to inject and store arbitrary… |
| CVE-2024-44653 | EW Ecommerce Website Kashipara | 6.5 | Nov 17 | Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php |
| CVE-2024-46336 | SM School Management System Kashipara | 6.1 | Nov 17 | kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /client_user/feedback.php |
| CVE-2024-44652 | EW Ecommerce Website Kashipara | 6.5 | Nov 17 | Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, user_lastname, and user_address parameters in user_register.php |
| CVE-2024-44651 | EW Ecommerce Website Kashipara | 6.5 | Nov 17 | Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recover_email parameter in user_password_recover.php |
| CVE-2024-46334 | SM School Management System Kashipara | 6.1 | Nov 17 | kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the formuser and formpassword parameters in /adminLogin.php |
| CVE-2025-5214 | RO Responsive Online Learing Platform Kashipara | 9.8 | May 26 | Kashipara Responsive Online Learing Platform course_detail_user_new.php sql injection |
| CVE-2025-26158 | OA Online Attendance Management System Kashipara | 5.6 | Feb 14 | A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the manage-employee.php page of Kashipara Online Attendance Management System V1.0 |
| CVE-2024-12233 | ON Online Notice Board System Kashipara | 9.8 | Dec 5 | code-projects Online Notice Board Profile Picture registration.php unrestricted upload |
| CVE-2024-50841 | EL E Learning Management System Project Kashipara | 5.4 | Nov 14 | A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/calendar_of_events.php in KASHIPARA E-learning Management System Project 1.0 |
| CVE-2024-50833 | EL E Learning Management System Project Kashipara | 9.8 | Nov 14 | A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the username and password parameters |
| CVE-2024-50830 | EL E Learning Management System Project Kashipara | 7.2 | Nov 14 | A SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara E-learning Management System Project 1.0 via the date_start, date_end, and title parameters |
| CVE-2024-50824 | EL E Learning Management System Project Kashipara | 7.2 | Nov 14 | A SQL Injection vulnerability was found in /admin/class.php in kashipara E-learning Management System Project 1.0 via the class_name parameter |
| CVE-2024-50823 | EL E Learning Management System Project Kashipara | 9.8 | Nov 14 | A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and password parameters |
| CVE-2024-50840 | EL E Learning Management System Project Kashipara | 5.4 | Nov 14 | A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/class.php in KASHIPARA E-learning Management System Project 1.0 |
| CVE-2024-50831 | EL E Learning Management System Project Kashipara | 7.2 | Nov 14 | A SQL Injection was found in /admin/admin_user.php in kashipara E-learning Management System Project 1.0 via the username and password parameters |
| CVE-2024-50828 | EL E Learning Management System Project Kashipara | 7.2 | Nov 14 | A SQL Injection vulnerability was found in /admin/edit_department.php in kashipara E-learning Management System Project 1.0 via the d parameter |
| CVE-2024-50835 | EL E Learning Management System Project Kashipara | 7.2 | Nov 14 | A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parameters |
| CVE-2024-50839 | EL E Learning Management System Project Kashipara | 5.4 | Nov 14 | A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/add_subject.php in KASHIPARA E-learning Management System Project 1.0 |
| CVE-2024-50837 | EL E Learning Management System Project Kashipara | 5.4 | Nov 14 | A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/admin_user.php in KASHIPARA E-learning Management System Project 1.0 |
| CVE-2024-50825 | EL E Learning Management System Project Kashipara | 7.2 | Nov 14 | A SQL Injection vulnerability was found in /admin/school_year.php in kashipara E-learning Management System Project 1.0 via the school_year parameter |
| CVE-2024-50829 | EL E Learning Management System Project Kashipara | 7.2 | Nov 14 | A SQL Injection vulnerability was found in /admin/edit_subject.php in kashipara E-learning Management System Project 1.0 via the unit parameter |
| CVE-2024-50826 | EL E Learning Management System Project Kashipara | 7.2 | Nov 14 | A SQL Injection vulnerability was found in /admin/add_content.php in kashipara E-learning Management System Project 1.0 via the title and content parameters |
| CVE-2024-50827 | EL E Learning Management System Project Kashipara | 7.2 | Nov 14 | A SQL Injection vulnerability was found in /admin/add_subject.php in kashipara E-learning Management System Project 1.0 via the subject_code parameter |
| CVE-2024-50838 | EL E Learning Management System Project Kashipara | 5.4 | Nov 14 | A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/department.php in KASHIPARA E-learning Management System Project 1.0 |
| CVE-2024-50832 | EL E Learning Management System Project Kashipara | 7.2 | Nov 14 | A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning Management System Project 1.0 via the class_name parameter |
| CVE-2024-50842 | EL E Learning Management System Project Kashipara | 5.4 | Nov 14 | A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/school_year.php in KASHIPARA E-learning Management System Project 1.0 |
| CVE-2024-50834 | EL E Learning Management System Project Kashipara | 7.2 | Nov 14 | A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters |
| CVE-2024-42797 | MM Music Management System Kashipara | 9.8 | Sep 24 | An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Music Management System v1.0 |
| CVE-2024-42795 | MM Music Management System Kashipara | 4.2 | Sep 16 | An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_user&id=3 in Kashipara Music Management System v1.0 |
| CVE-2024-42794 | MM Music Management System Kashipara | 4.7 | Sep 16 | Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax.php?action=save_user |
| CVE-2024-42798 | MM Music Management System Kashipara | 7.6 | Sep 16 | An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_user in Kashipara Music Management System v1.0 |
| CVE-2024-42796 | MM Music Management System Kashipara | 5.9 | Sep 16 | An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music Management System v1.0 |
| CVE-2024-42793 | MM Music Management System Kashipara | 8.0 | Aug 28 | A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via a crafted request to the /music/ajax.php?action=save_user page |
| CVE-2024-41236 | RS Responsive School Management System Kashipara | 7.2 | Aug 28 | A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the… |
| CVE-2024-42791 | MM Music Management System Kashipara | 8.8 | Aug 26 | A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=delete_genre |
| CVE-2024-42790 | MM Music Management System Kashipara | 5.4 | Aug 26 | A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/index.php?page=test" in Kashipara Music Management System v1.0 |
| CVE-2024-42792 | MM Music Management System Kashipara | 3.5 | Aug 26 | A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=delete_playlist page |
| CVE-2024-42788 | MM Music Management System Kashipara | 6.1 | Aug 26 | A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0 |
| CVE-2024-42789 | MM Music Management System Kashipara | 6.3 | Aug 26 | A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/controller.php?page=test" in Kashipara Music Management System v1.0 |
| CVE-2024-42787 | MM Music Management System Kashipara | 6.1 | Aug 26 | A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0 |
| CVE-2024-42764 | BT Bus Ticket Reservation System Kashipara | 9.4 | Aug 23 | Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via /deleteTicket.php |
| CVE-2024-42766 | BT Bus Ticket Reservation System Kashipara | 5.4 | Aug 23 | Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php |
| CVE-2024-42765 | BT Bus Ticket Reservation System Kashipara | 9.8 | Aug 23 | A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via… |
| CVE-2024-42774 | HM Hotel Management System Kashipara | 7.5 | Aug 22 | An Incorrect Access Control vulnerability was found in /admin/delete_room.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to delete valid… |
| CVE-2024-42767 | HM Hotel Management System Kashipara | 7.2 | Aug 22 | Kashipara Hotel Management System v1.0 is vulnerable to Unrestricted File Upload RCE via /admin/add_room_controller.php |
| CVE-2024-42768 | HM Hotel Management Kashipara | 6.8 | Aug 22 | A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Hotel Management System v1.0 via /admin/delete_room.php |
| CVE-2024-42775 | HM Hotel Management System Kashipara | 9.1 | Aug 22 | An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to add… |
| CVE-2024-42772 | HM Hotel Management System Kashipara | 7.5 | Aug 22 | An Incorrect Access Control vulnerability was found in /admin/rooms.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to view valid hotel… |
| CVE-2024-42769 | HM Hotel Management System Kashipara | 6.1 | Aug 22 | A Reflected Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php " of Kashipara Hotel Management System v1.0, which allows remote attackers to execute… |
| CVE-2024-42776 | HM Hotel Management System Kashipara | 7.2 | Aug 22 | Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php |
| CVE-2024-42770 | HM Hotel Management Kashipara | 4.7 | Aug 22 | A Stored Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php" of Kashipara Hotel Management System v1.0, which allows remote attackers to execute… |
| CVE-2024-42763 | BT Bus Ticket Reservation System Kashipara | 5.4 | Aug 22 | A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to… |
| CVE-2024-42771 | HM Hotel Management System Kashipara | 4.8 | Aug 22 | A Stored Cross Site Scripting (XSS) vulnerability was found in " /admin/edit_room_controller.php" of the Kashipara Hotel Management System v1.0, which allows remote attackers to… |
| CVE-2024-42773 | HM Hotel Management System Kashipara | 9.1 | Aug 22 | An Incorrect Access Control vulnerability was found in /admin/edit_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to edit… |
| CVE-2024-42762 | BT Bus Ticket Reservation System Kashipara | 5.4 | Aug 22 | A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary… |
| CVE-2024-42761 | BT Bus Ticket Reservation System Kashipara | 6.1 | Aug 22 | A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute… |
| CVE-2024-42785 | MM Music Management System Kashipara | 8.8 | Aug 21 | A SQL injection vulnerability in /music/index.php?page=view_playlist in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id"… |
| CVE-2024-42786 | MM Music Management System Kashipara | 8.8 | Aug 21 | A SQL injection vulnerability in "/music/view_user.php" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter of… |
| CVE-2024-42784 | MM Music Management System Kashipara | 9.8 | Aug 21 | A SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the… |