← Back

E Learning Management System

e-learning_management_system

Vendor: Lopalopa • 41 CVEs

CVEs (41)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Lopalopa
1E Learning Management System
Jun 17, 2026
Dec 9, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
KASHIPARA E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_subject.php.
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection was found in /admin/admin_user.php in kashipara E-learning Management System Project 1.0 via the username and password parameters.
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara E-learning Management System Project 1.0 via the date_start, date_end, and title parameters.
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/edit_subject.php in kashipara E-learning Management System Project 1.0 via the unit parameter.
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/edit_department.php in kashipara E-learning Management System Project 1.0 via the d parameter.
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/add_subject.php in kashipara E-learning Management System Project 1.0 via the subject_code parameter.
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/add_content.php in kashipara E-learning Management System Project 1.0 via the title and content parameters.
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/school_year.php in kashipara E-learning Management System Project 1.0 via the school_year parameter.
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/class.php in kashipara E-learning Management System Project 1.0 via the class_name parameter.
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and password parameters.
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
4.8 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the fi...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and lastname parameters.Show less
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parameters.
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters.
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the username and password parameters.
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning Management System Project 1.0 via the class_name parameter.
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/department.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/department.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the d and pi parameters.Show less
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/admin_user.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/admin_user.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and username parameters.Show less
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/school_year.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/school_year.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the school_year parameter.Show less
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/calendar_of_events.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/calendar_of_events.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the date_start, date_end, and title parameters.Show less
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/class.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the class...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/class.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the class_name parameter.Show less