Lopalopa

Records112All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical26CVSS 9.0–10.0

CVSS high35CVSS 7.0–8.9

Exploited now

Lopalopa records in CISA KEV

No Lopalopa vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

E-learning Management System 41 records HIGH Music Management System 22 records HIGH College Management System 21 records MEDIUM Responsive School Management System 17 records HIGH Live Membership System 4 records HIGH Dynamic Lab Management System 3 records HIGH Online Service Management Portal 3 records HIGH Responsive Online Learing Platform 1 record HIGH

Records

41 records in E-learning Management System · all components

TI-2024-36717 CVE-2024-54934 · GHSA-5qrg-ccrj-6fg3

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_class.php.

HIGH 82

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_class.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2024-12-09 No fix listed CWE-89

TI-2024-36716 CVE-2024-54933 · GHSA-4wg6-j4jc-xh8j

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_content.php.

HIGH 82

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_content.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00493 Published 2024-12-09 No fix listed CWE-89

TI-2024-36715 CVE-2024-54932 · GHSA-38g9-r8v2-99xr

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_department.php.

HIGH 82

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_department.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2024-12-09 No fix listed CWE-89

TI-2024-36714 CVE-2024-54931 · GHSA-856r-5w5p-h874

A SQL Injection was found in /admin/delete_event.php in kashipara E-learning Management…

HIGH 82

A SQL Injection was found in /admin/delete_event.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id paramete…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.006 Published 2024-12-09 No fix listed CWE-89

TI-2024-36713 CVE-2024-54930 · GHSA-6qhw-w3qj-8cf9

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_student.php.

HIGH 82

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_student.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00493 Published 2024-12-09 No fix listed CWE-89

TI-2024-36709 CVE-2024-54926 · GHSA-vh4h-v74p-9778

A SQL Injection vulnerability was found in /search_class.php of kashipara E-learning…

HIGH 82

A SQL Injection vulnerability was found in /search_class.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the sch…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00582 Published 2024-12-09 No fix listed CWE-89

TI-2024-36708 CVE-2024-54925 · GHSA-c9cj-xh7p-qvvr

A SQL Injection was found in /remove_sent_message.php in kashipara E-learning Management…

HIGH 82

A SQL Injection was found in /remove_sent_message.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id paramet…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.006 Published 2024-12-09 No fix listed CWE-89

TI-2024-36707 CVE-2024-54924 · GHSA-xfmg-7r6x-xpg8

A SQL Injection was found in /admin/edit_content.php in kashipara E-learning Management…

HIGH 82

A SQL Injection was found in /admin/edit_content.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the title and c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.006 Published 2024-12-09 No fix listed CWE-89

TI-2024-36706 CVE-2024-54923 · GHSA-3q42-g7wg-ggw3

A SQL Injection vulnerability was found in /admin/edit_teacher.php in kashipara…

HIGH 82

A SQL Injection vulnerability was found in /admin/edit_teacher.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via t…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.006 Published 2024-12-09 No fix listed CWE-89

TI-2024-36705 CVE-2024-54922 · GHSA-vq37-g99r-q77r

A SQL Injection was found in /admin/edit_user.php of kashipara E-learning Management…

HIGH 82

A SQL Injection was found in /admin/edit_user.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the firstname, las…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00579 Published 2024-12-09 No fix listed CWE-89

TI-2024-36704 CVE-2024-54921 · GHSA-68q5-f84h-346q

A SQL Injection was found in /student_signup.php in kashipara E-learning Management…

HIGH 82

A SQL Injection was found in /student_signup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username, first…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.006 Published 2024-12-09 No fix listed CWE-89

TI-2024-36703 CVE-2024-54920 · GHSA-p55v-8989-68v9

A SQL Injection vulnerability was found in /teacher_signup.php of kashipara E-learning…

HIGH 82

A SQL Injection vulnerability was found in /teacher_signup.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the fi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00599 Published 2024-12-09 No fix listed CWE-89

TI-2024-36701 CVE-2024-54918 · GHSA-xhx6-w3cj-3336

Kashipara E-learning Management System v1.0 is vulnerable to Remote Code Execution via…

HIGH 82

Kashipara E-learning Management System v1.0 is vulnerable to Remote Code Execution via File Upload in /teacher_avatar.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00924 Published 2024-12-09 No fix listed CWE-434

TI-2024-34130 CVE-2024-50833 · GHSA-r9hc-4g26-2p7q

A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management…

HIGH 75

A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the username and password parameters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0064 Published 2024-11-14 No fix listed CWE-89

TI-2024-34120 CVE-2024-50823 · GHSA-gff4-664q-3j2w

A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning…

HIGH 75

A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and password parameters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00517 Published 2024-11-14 No fix listed CWE-89

TI-2024-36721 CVE-2024-54938 · GHSA-wxx9-pq23-vg6j

A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which…

HIGH 72

A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attackers to access sensitive files and directories via /admin/uploads.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00564 Published 2024-12-09 No fix listed CWE-125

TI-2024-36712 CVE-2024-54929 · GHSA-fppg-2vjw-7hf6

KASHIPARA E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_subject.php.

HIGH 67

KASHIPARA E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_subject.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00508 Published 2024-12-09 No fix listed CWE-89

TI-2024-36710 CVE-2024-54927 · GHSA-96jh-w5wq-573j

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_users.php.

HIGH 67

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_users.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00488 Published 2024-12-09 No fix listed CWE-89

TI-2024-34132 CVE-2024-50835 · GHSA-w6cj-wqfc-3399

A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA…

HIGH 65

A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parameters.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00623 Published 2024-11-14 No fix listed CWE-89

TI-2024-34131 CVE-2024-50834 · GHSA-j3mc-39r6-x2fr

A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management…

HIGH 65

A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00623 Published 2024-11-14 No fix listed CWE-89

TI-2024-34129 CVE-2024-50832 · GHSA-87h5-wgc4-4945

A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning…

HIGH 65

A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning Management System Project 1.0 via the class_name parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00623 Published 2024-11-14 No fix listed CWE-89

TI-2024-34128 CVE-2024-50831 · GHSA-crm2-5cww-28rj

A SQL Injection was found in /admin/admin_user.php in kashipara E-learning Management…

HIGH 65

A SQL Injection was found in /admin/admin_user.php in kashipara E-learning Management System Project 1.0 via the username and password parameters.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00408 Published 2024-11-14 No fix listed CWE-89

TI-2024-34127 CVE-2024-50830 · GHSA-mgmm-hp93-6p86

A SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara…

HIGH 65

A SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara E-learning Management System Project 1.0 via the date_start, date_end, and title parameters.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00408 Published 2024-11-14 No fix listed CWE-89

TI-2024-34126 CVE-2024-50829 · GHSA-7wg6-j59f-2m29

A SQL Injection vulnerability was found in /admin/edit_subject.php in kashipara…

HIGH 65

A SQL Injection vulnerability was found in /admin/edit_subject.php in kashipara E-learning Management System Project 1.0 via the unit parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00408 Published 2024-11-14 No fix listed CWE-89

TI-2024-34125 CVE-2024-50828 · GHSA-2qvw-3g4j-cwhp

A SQL Injection vulnerability was found in /admin/edit_department.php in kashipara…

HIGH 65

A SQL Injection vulnerability was found in /admin/edit_department.php in kashipara E-learning Management System Project 1.0 via the d parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00408 Published 2024-11-14 No fix listed CWE-89

Open these records in search →