Vulnerabilities

TI-2025-28759 CVE-2025-45322 · GHSA-gc92-8qg7-j9qw

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in…

HIGH 82

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00491 Published 2025-05-05 No fix listed CWE-89

TI-2025-28758 CVE-2025-45321 · GHSA-39hv-4jx8-pggm

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in…

HIGH 73

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.php via the parameter: rPassword.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00487 Published 2025-05-05 No fix listed CWE-89

TI-2025-28757 CVE-2025-45320 · GHSA-w64c-qgh2-qj9c

A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the…

HIGH 72

A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00407 Published 2025-05-05 No fix listed CWE-548

Vulnerabilities

Filters

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in…

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in…

A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the…