← Back

Lopalopa

lopalopa

112 CVEs • 8 products

Products (8)

Click to collapse
Toggle
E Learning Management System
e-learning_management_system
41 CVEs
Music Management System
music_management_system
22 CVEs
College Management System
college_management_system
21 CVEs
Responsive School Management System
responsive_school_management_system
17 CVEs
Live Membership System
live_membership_system
4 CVEs
Dynamic Lab Management System
dynamic_lab_management_system
3 CVEs
Online Service Management Portal
online_service_management_portal
3 CVEs
Responsive Online Learing Platform
responsive_online_learing_platform
1 CVE

CVEs (112)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-50837
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/admin_user.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/admin_user.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and username parameters.Show less
CVE-2024-50842
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/school_year.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/school_year.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the school_year parameter.Show less
CVE-2024-50841
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/calendar_of_events.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/calendar_of_events.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the date_start, date_end, and title parameters.Show less
CVE-2024-50840
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/class.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the class...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/class.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the class_name parameter.Show less
CVE-2024-50839
1Lopalopa
1E Learning Management System
Jun 17, 2026
Nov 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/add_subject.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the...Show more
A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/add_subject.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the subject_code and title parameters.Show less
CVE-2024-42797
1Lopalopa
1Music Management System
Jun 17, 2026
Sep 25, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music pla...Show more
An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music playlist entries.Show less
CVE-2024-42798
1Lopalopa
1Music Management System
Jun 17, 2026
Sep 16, 2024
N/A· v4
7.6 HIGH· v3
N/A· v2
An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_user in Kashipara Music Management System v1.0. This allows a low privileged attacker to take over the...Show more
An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_user in Kashipara Music Management System v1.0. This allows a low privileged attacker to take over the administrator account.Show less
CVE-2024-42796
1Lopalopa
1Music Management System
Jun 17, 2026
Sep 16, 2024
N/A· v4
5.9 MEDIUM· v3
N/A· v2
An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music genre...Show more
An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music genre entries.Show less
CVE-2024-42795
1Lopalopa
1Music Management System
Jun 17, 2026
Sep 16, 2024
N/A· v4
4.2 MEDIUM· v3
N/A· v2
An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_user&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attac...Show more
An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_user&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to view valid user details.Show less
CVE-2024-42794
1Lopalopa
1Music Management System
Jun 17, 2026
Sep 16, 2024
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax.php?action=save_user.
CVE-2024-42793
1Lopalopa
1Music Management System
Jun 17, 2026
Aug 28, 2024
N/A· v4
8.0 HIGH· v3
N/A· v2
A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via a crafted request to the /music/ajax.php?action=save_user page.
CVE-2024-41236
1Lopalopa
1Responsive School Management System
Jun 17, 2026
Aug 28, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page
CVE-2024-42792
1Lopalopa
1Music Management System
Jun 17, 2026
Aug 26, 2024
N/A· v4
3.5 LOW· v3
N/A· v2
A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=delete_playlist page.
CVE-2024-42790
1Lopalopa
1Music Management System
Jun 17, 2026
Aug 26, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/index.php?page=test" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via the "page...Show more
A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/index.php?page=test" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via the "page" parameter.Show less
CVE-2024-42791
1Lopalopa
1Music Management System
Jun 17, 2026
Aug 26, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=delete_genre.
CVE-2024-42788
1Lopalopa
1Music Management System
Jun 17, 2026
Aug 26, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via "titl...Show more
A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via "title" & "artist" parameter fields.Show less
CVE-2024-42789
1Lopalopa
1Music Management System
Jun 17, 2026
Aug 26, 2024
N/A· v4
6.3 MEDIUM· v3
N/A· v2
A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/controller.php?page=test" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via the...Show more
A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/controller.php?page=test" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via the "page" parameter.Show less
CVE-2024-42787
1Lopalopa
1Music Management System
Jun 17, 2026
Aug 26, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via "t...Show more
A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via "title" & "description" parameter fields.Show less
CVE-2024-42786
1Lopalopa
1Music Management System
Jun 17, 2026
Aug 21, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
A SQL injection vulnerability in "/music/view_user.php" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter of View User Profile Page.
CVE-2024-42785
1Lopalopa
1Music Management System
Jun 17, 2026
Aug 21, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
A SQL injection vulnerability in /music/index.php?page=view_playlist in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter.