https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-42797.htmlhttps://patchthecve.com/cve/CVE-2024-42797.htmlWed, 17 Jun 2026 07:50:02 +0000CRITICAL 9.8: An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music playlist entries.https://patchthecve.com/cve/CVE-2024-42798.htmlhttps://patchthecve.com/cve/CVE-2024-42798.htmlWed, 17 Jun 2026 07:50:03 +0000HIGH 7.6: An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_user in Kashipara Music Management System v1.0. This allows a low privileged attacker to take over the administrator account.https://patchthecve.com/cve/CVE-2024-42796.htmlhttps://patchthecve.com/cve/CVE-2024-42796.htmlWed, 17 Jun 2026 07:50:02 +0000MEDIUM 5.9: An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music genre entries.https://patchthecve.com/cve/CVE-2024-42795.htmlhttps://patchthecve.com/cve/CVE-2024-42795.htmlWed, 17 Jun 2026 07:50:02 +0000MEDIUM 4.2: An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_user&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to view valid user details.https://patchthecve.com/cve/CVE-2024-42794.htmlhttps://patchthecve.com/cve/CVE-2024-42794.htmlWed, 17 Jun 2026 07:50:02 +0000MEDIUM 4.7: Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax.php?action=save_user.https://patchthecve.com/cve/CVE-2024-42793.htmlhttps://patchthecve.com/cve/CVE-2024-42793.htmlWed, 17 Jun 2026 07:50:02 +0000HIGH 8.0: A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via a crafted request to the /music/ajax.php?action=save_user page.https://patchthecve.com/cve/CVE-2024-42792.htmlhttps://patchthecve.com/cve/CVE-2024-42792.htmlWed, 17 Jun 2026 07:50:01 +0000LOW 3.5: A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=delete_playlist page.https://patchthecve.com/cve/CVE-2024-42790.htmlhttps://patchthecve.com/cve/CVE-2024-42790.htmlWed, 17 Jun 2026 07:50:01 +0000MEDIUM 5.4: A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/index.php?page=test" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via the "page" parameter.https://patchthecve.com/cve/CVE-2024-42791.htmlhttps://patchthecve.com/cve/CVE-2024-42791.htmlWed, 17 Jun 2026 07:50:01 +0000HIGH 8.8: A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=delete_genre.https://patchthecve.com/cve/CVE-2024-42788.htmlhttps://patchthecve.com/cve/CVE-2024-42788.htmlWed, 17 Jun 2026 07:50:01 +0000MEDIUM 6.1: A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via "title" & "artist" parameter fields.https://patchthecve.com/cve/CVE-2024-42789.htmlhttps://patchthecve.com/cve/CVE-2024-42789.htmlWed, 17 Jun 2026 07:50:01 +0000MEDIUM 6.3: A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/controller.php?page=test" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via the "page" parameter.https://patchthecve.com/cve/CVE-2024-42787.htmlhttps://patchthecve.com/cve/CVE-2024-42787.htmlWed, 17 Jun 2026 07:50:01 +0000MEDIUM 6.1: A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via "title" & "description" parameter fields.https://patchthecve.com/cve/CVE-2024-42786.htmlhttps://patchthecve.com/cve/CVE-2024-42786.htmlWed, 17 Jun 2026 07:50:00 +0000HIGH 8.8: A SQL injection vulnerability in "/music/view_user.php" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter of View User Profile Page.https://patchthecve.com/cve/CVE-2024-42785.htmlhttps://patchthecve.com/cve/CVE-2024-42785.htmlWed, 17 Jun 2026 07:50:00 +0000HIGH 8.8: A SQL injection vulnerability in /music/index.php?page=view_playlist in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter.https://patchthecve.com/cve/CVE-2024-42784.htmlhttps://patchthecve.com/cve/CVE-2024-42784.htmlWed, 17 Jun 2026 07:50:00 +0000CRITICAL 9.8: A SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter.https://patchthecve.com/cve/CVE-2024-42783.htmlhttps://patchthecve.com/cve/CVE-2024-42783.htmlWed, 17 Jun 2026 07:50:00 +0000CRITICAL 9.8: Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php. An attacker can execute arbitrary SQL commands via the "pid" parameter.https://patchthecve.com/cve/CVE-2024-42782.htmlhttps://patchthecve.com/cve/CVE-2024-42782.htmlWed, 17 Jun 2026 07:50:00 +0000CRITICAL 9.8: A SQL injection vulnerability in "/music/ajax.php?action=find_music" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "search" parameter.https://patchthecve.com/cve/CVE-2024-42781.htmlhttps://patchthecve.com/cve/CVE-2024-42781.htmlWed, 17 Jun 2026 07:50:00 +0000CRITICAL 9.8: A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email parameter.https://patchthecve.com/cve/CVE-2024-42780.htmlhttps://patchthecve.com/cve/CVE-2024-42780.htmlWed, 17 Jun 2026 07:49:59 +0000HIGH 8.8: An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_genre" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file.https://patchthecve.com/cve/CVE-2024-42779.htmlhttps://patchthecve.com/cve/CVE-2024-42779.htmlWed, 17 Jun 2026 07:49:59 +0000HIGH 8.8: An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file.https://patchthecve.com/cve/CVE-2024-42778.htmlhttps://patchthecve.com/cve/CVE-2024-42778.htmlWed, 17 Jun 2026 07:49:59 +0000HIGH 8.8: An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file.https://patchthecve.com/cve/CVE-2024-42777.htmlhttps://patchthecve.com/cve/CVE-2024-42777.htmlWed, 17 Jun 2026 07:49:59 +0000CRITICAL 9.8: An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file.