music management system vulnerabilities and fixes

Recent CVEs affecting music management system, with upgrade or downgrade steps. 22 tracked.

Also searched as: musicmanagementsystem.

music management system has 22 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-09-25. Highest priority: CVE-2024-42777 (score 58/100).

• CVE-2024-42798 HIGH 7.6 DOWNGRADE An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?pa
• CVE-2024-42797 CRITICAL 9.8 DOWNGRADE An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Mus
• CVE-2024-42796 MEDIUM 5.9 DOWNGRADE An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music
• CVE-2024-42795 MEDIUM 4.2 DOWNGRADE An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?pag
• CVE-2024-42794 MEDIUM 4.7 DOWNGRADE Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax.php?action=sa
• CVE-2024-42793 HIGH 8.0 DOWNGRADE A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via a cr
• CVE-2024-42792 LOW 3.5 DOWNGRADE A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /mus
• CVE-2024-42791 HIGH 8.8 DOWNGRADE A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /mus
• CVE-2024-42790 MEDIUM 5.4 DOWNGRADE A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/index.php?page=test" in Kashipara Mu
• CVE-2024-42789 MEDIUM 6.3 DOWNGRADE A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/controller.php?page=test" in Kashipa
• CVE-2024-42788 MEDIUM 6.1 DOWNGRADE A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_music" in Kashipar
• CVE-2024-42787 MEDIUM 6.1 DOWNGRADE A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashi
• CVE-2024-42786 HIGH 8.8 DOWNGRADE A SQL injection vulnerability in "/music/view_user.php" in Kashipara Music Management System v1.0 allows an at
• CVE-2024-42785 HIGH 8.8 DOWNGRADE A SQL injection vulnerability in /music/index.php?page=view_playlist in Kashipara Music Management System v1.0
• CVE-2024-42784 CRITICAL 9.8 DOWNGRADE A SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music Management System
• CVE-2024-42783 CRITICAL 9.8 DOWNGRADE Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php
• CVE-2024-42782 CRITICAL 9.8 DOWNGRADE A SQL injection vulnerability in "/music/ajax.php?action=find_music" in Kashipara Music Management System v1.0
• CVE-2024-42781 CRITICAL 9.8 DOWNGRADE A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allo
• CVE-2024-42780 HIGH 8.8 DOWNGRADE An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_genre" in Kashipara Music
• CVE-2024-42779 HIGH 8.8 DOWNGRADE An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music
• CVE-2024-42778 HIGH 8.8 DOWNGRADE An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Mus
• CVE-2024-42777 CRITICAL 9.8 DOWNGRADE An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Mana

FAQ

How do I fix music management system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is music management system being exploited right now?

None of the tracked music management system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which music management system CVE should I patch first?

CVE-2024-42777 currently ranks highest (58/100): An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Mana.

RSS feed for music management system · ← Back to latest CVEs