← Back

Lopalopa

lopalopa

112 CVEs • 8 products

Products (8)

Click to collapse
Toggle
E Learning Management System
e-learning_management_system
41 CVEs
Music Management System
music_management_system
22 CVEs
College Management System
college_management_system
21 CVEs
Responsive School Management System
responsive_school_management_system
17 CVEs
Live Membership System
live_membership_system
4 CVEs
Dynamic Lab Management System
dynamic_lab_management_system
3 CVEs
Online Service Management Portal
online_service_management_portal
3 CVEs
Responsive Online Learing Platform
responsive_online_learing_platform
1 CVE

CVEs (112)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-54920
1Lopalopa
1E Learning Management System
Jun 17, 2026
Dec 9, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL Injection vulnerability was found in /teacher_signup.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the fi...Show more
A SQL Injection vulnerability was found in /teacher_signup.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the firstname, lastname, and class_id parameters.Show less
CVE-2024-54919
1Lopalopa
1E Learning Management System
Jun 17, 2026
Dec 9, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross Site Scripting (XSS ) was found in /teacher_avatar.php of kashipara E-learning Management System v1.0. This vulnerability allows remote attackers to execute arbitrary java script via the filename parameter...Show more
A Stored Cross Site Scripting (XSS ) was found in /teacher_avatar.php of kashipara E-learning Management System v1.0. This vulnerability allows remote attackers to execute arbitrary java script via the filename parameter.Show less
CVE-2024-54937
1Lopalopa
1E Learning Management System
Jun 17, 2026
Dec 9, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attackers to access sensitive files and directories via /admin/assets.
CVE-2024-54936
1Lopalopa
1E Learning Management System
Jun 17, 2026
Dec 9, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /send_message.php of Kashipara E-learning Management System v1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the my_message...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /send_message.php of Kashipara E-learning Management System v1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the my_message parameter.Show less
CVE-2024-54929
1Lopalopa
1E Learning Management System
Jun 17, 2026
Dec 9, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
KASHIPARA E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_subject.php.
CVE-2024-50831
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection was found in /admin/admin_user.php in kashipara E-learning Management System Project 1.0 via the username and password parameters.
CVE-2024-50830
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara E-learning Management System Project 1.0 via the date_start, date_end, and title parameters.
CVE-2024-50829
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/edit_subject.php in kashipara E-learning Management System Project 1.0 via the unit parameter.
CVE-2024-50828
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/edit_department.php in kashipara E-learning Management System Project 1.0 via the d parameter.
CVE-2024-50827
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/add_subject.php in kashipara E-learning Management System Project 1.0 via the subject_code parameter.
CVE-2024-50826
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/add_content.php in kashipara E-learning Management System Project 1.0 via the title and content parameters.
CVE-2024-50825
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/school_year.php in kashipara E-learning Management System Project 1.0 via the school_year parameter.
CVE-2024-50824
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/class.php in kashipara E-learning Management System Project 1.0 via the class_name parameter.
CVE-2024-50823
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and password parameters.
CVE-2024-50836
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
4.8 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the fi...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and lastname parameters.Show less
CVE-2024-50835
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parameters.
CVE-2024-50834
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters.
CVE-2024-50833
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the username and password parameters.
CVE-2024-50832
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning Management System Project 1.0 via the class_name parameter.
CVE-2024-50838
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/department.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/department.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the d and pi parameters.Show less