lopalopa vulnerabilities

Recent CVEs affecting lopalopa products. 85 tracked.

lopalopa has 85 tracked vulnerabilities, 20 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-05-27. Highest priority: CVE-2024-40482 (score 61/100).

CVE-2025-5214 HIGH 7.3 DOWNGRADE A vulnerability was found in Kashipara Responsive Online Learing Platform 1.0
CVE-2024-54938 HIGH 7.5 DOWNGRADE A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attack
CVE-2024-54937 MEDIUM 5.3 DOWNGRADE A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attack
CVE-2024-54936 MEDIUM 5.4 DOWNGRADE A Stored Cross-Site Scripting (XSS) vulnerability was found in /send_message.php of Kashipara E-learning Manag
CVE-2024-54935 MEDIUM 5.4 DOWNGRADE A Stored Cross-Site Scripting (XSS) vulnerability was found in /send_message_teacher_to_student.php of kashipa
CVE-2024-54934 CRITICAL 9.8 DOWNGRADE Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_class.php.
CVE-2024-54933 HIGH 7.2 DOWNGRADE Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_content.php.
CVE-2024-54932 CRITICAL 9.8 DOWNGRADE Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_department.php.
CVE-2024-54931 CRITICAL 9.8 DOWNGRADE A SQL Injection was found in /admin/delete_event.php in kashipara E-learning Management System v1.0, which all
CVE-2024-54930 HIGH 7.2 DOWNGRADE Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_student.php.
CVE-2024-54929 HIGH 7.2 DOWNGRADE KASHIPARA E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_subject.php.
CVE-2024-54928 HIGH 7.2 DOWNGRADE kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_teacher.php,
CVE-2024-54927 HIGH 7.2 DOWNGRADE Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_users.php.
CVE-2024-54926 HIGH 8.8 DOWNGRADE A SQL Injection vulnerability was found in /search_class.php of kashipara E-learning Management System v1.0, w
CVE-2024-54925 CRITICAL 9.8 DOWNGRADE A SQL Injection was found in /remove_sent_message.php in kashipara E-learning Management System v1.0, which al
CVE-2024-54924 CRITICAL 9.8 DOWNGRADE A SQL Injection was found in /admin/edit_content.php in kashipara E-learning Management System v1.0, which all
CVE-2024-54923 CRITICAL 9.8 DOWNGRADE A SQL Injection vulnerability was found in /admin/edit_teacher.php in kashipara E-learning Management System v
CVE-2024-54922 HIGH 7.2 DOWNGRADE A SQL Injection was found in /admin/edit_user.php of kashipara E-learning Management System v1.0, which allows
CVE-2024-54921 CRITICAL 9.8 DOWNGRADE A SQL Injection was found in /student_signup.php in kashipara E-learning Management System v1.0, which allows
CVE-2024-54920 CRITICAL 9.8 DOWNGRADE A SQL Injection vulnerability was found in /teacher_signup.php of kashipara E-learning Management System v1.0,
CVE-2024-54919 MEDIUM 5.4 DOWNGRADE A Stored Cross Site Scripting (XSS ) was found in /teacher_avatar.php of kashipara E-learning Management Syste
CVE-2024-54918 CRITICAL 9.8 DOWNGRADE Kashipara E-learning Management System v1.0 is vulnerable to Remote Code Execution via File Upload in /teacher
CVE-2024-50842 MEDIUM 5.4 DOWNGRADE A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/school_year.php in KASHIPARA E-learning
CVE-2024-50841 MEDIUM 5.4 DOWNGRADE A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/calendar_of_events.php in KASHIPARA E-le
CVE-2024-50840 MEDIUM 5.4 DOWNGRADE A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/class.php in KASHIPARA E-learning Manage
CVE-2024-50839 MEDIUM 5.4 DOWNGRADE A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/add_subject.php in KASHIPARA E-learning
CVE-2024-50838 MEDIUM 5.4 DOWNGRADE A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/department.php in KASHIPARA E-learning M
CVE-2024-50837 MEDIUM 5.4 DOWNGRADE A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/admin_user.php in KASHIPARA E-learning M
CVE-2024-50836 MEDIUM 4.8 DOWNGRADE A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Man
CVE-2024-50835 HIGH 7.2 DOWNGRADE A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System P
CVE-2024-50834 HIGH 7.2 DOWNGRADE A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the
CVE-2024-50833 CRITICAL 9.8 DOWNGRADE A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 vi
CVE-2024-50832 HIGH 7.2 DOWNGRADE A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning Management System Pro
CVE-2024-50831 HIGH 7.2 DOWNGRADE A SQL Injection was found in /admin/admin_user.php in kashipara E-learning Management System Project 1.0 via t
CVE-2024-50830 HIGH 7.2 DOWNGRADE A SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara E-learning Management Sy
CVE-2024-50829 HIGH 7.2 DOWNGRADE A SQL Injection vulnerability was found in /admin/edit_subject.php in kashipara E-learning Management System P
CVE-2024-50828 HIGH 7.2 DOWNGRADE A SQL Injection vulnerability was found in /admin/edit_department.php in kashipara E-learning Management Syste
CVE-2024-50827 HIGH 7.2 DOWNGRADE A SQL Injection vulnerability was found in /admin/add_subject.php in kashipara E-learning Management System Pr
CVE-2024-50826 HIGH 7.2 DOWNGRADE A SQL Injection vulnerability was found in /admin/add_content.php in kashipara E-learning Management System Pr
CVE-2024-50825 HIGH 7.2 DOWNGRADE A SQL Injection vulnerability was found in /admin/school_year.php in kashipara E-learning Management System Pr
CVE-2024-50824 HIGH 7.2 DOWNGRADE A SQL Injection vulnerability was found in /admin/class.php in kashipara E-learning Management System Project
CVE-2024-50823 CRITICAL 9.8 DOWNGRADE A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project
CVE-2024-42798 HIGH 7.6 DOWNGRADE An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?pa
CVE-2024-42797 CRITICAL 9.8 DOWNGRADE An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Mus
CVE-2024-42796 MEDIUM 5.9 DOWNGRADE An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music
CVE-2024-42795 MEDIUM 4.2 DOWNGRADE An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?pag
CVE-2024-42794 MEDIUM 4.7 DOWNGRADE Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax.php?action=sa
CVE-2024-42793 HIGH 8.0 DOWNGRADE A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via a cr
CVE-2024-42792 LOW 3.5 DOWNGRADE A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /mus
CVE-2024-42791 HIGH 8.8 DOWNGRADE A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /mus
CVE-2024-42790 MEDIUM 5.4 DOWNGRADE A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/index.php?page=test" in Kashipara Mu
CVE-2024-42789 MEDIUM 6.3 DOWNGRADE A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/controller.php?page=test" in Kashipa
CVE-2024-42788 MEDIUM 6.1 DOWNGRADE A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_music" in Kashipar
CVE-2024-42787 MEDIUM 6.1 DOWNGRADE A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashi
CVE-2024-42786 HIGH 8.8 DOWNGRADE A SQL injection vulnerability in "/music/view_user.php" in Kashipara Music Management System v1.0 allows an at
CVE-2024-42785 HIGH 8.8 DOWNGRADE A SQL injection vulnerability in /music/index.php?page=view_playlist in Kashipara Music Management System v1.0
CVE-2024-42784 CRITICAL 9.8 DOWNGRADE A SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music Management System
CVE-2024-42783 CRITICAL 9.8 DOWNGRADE Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php
CVE-2024-42782 CRITICAL 9.8 DOWNGRADE A SQL injection vulnerability in "/music/ajax.php?action=find_music" in Kashipara Music Management System v1.0
CVE-2024-42781 CRITICAL 9.8 DOWNGRADE A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allo
CVE-2024-42780 HIGH 8.8 DOWNGRADE An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_genre" in Kashipara Music
CVE-2024-42779 HIGH 8.8 DOWNGRADE An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music
CVE-2024-42778 HIGH 8.8 DOWNGRADE An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Mus
CVE-2024-42777 CRITICAL 9.8 DOWNGRADE An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Mana
CVE-2024-41252 MEDIUM 6.5 DOWNGRADE An Incorrect Access Control vulnerability was found in /smsa/admin_student_register_approval.php and /smsa/adm
CVE-2024-41251 MEDIUM 6.5 DOWNGRADE An Incorrect Access Control vulnerability was found in /smsa/admin_teacher_register_approval.php and /smsa/adm
CVE-2024-41250 MEDIUM 5.3 DOWNGRADE An Incorrect Access Control vulnerability was found in /smsa/view_students.php in Kashipara Responsive School
CVE-2024-41249 MEDIUM 5.3 DOWNGRADE An Incorrect Access Control vulnerability was found in /smsa/view_subject.php in Kashipara Responsive School M
CVE-2024-41248 MEDIUM 5.3 DOWNGRADE An Incorrect Access Control vulnerability was found in /smsa/add_subject.php and /smsa/add_subject_submit.php
CVE-2024-41247 MEDIUM 5.3 DOWNGRADE An Incorrect Access Control vulnerability was found in /smsa/add_class.php and /smsa/add_class_submit.php in K
CVE-2024-41246 MEDIUM 5.3 DOWNGRADE An Incorrect Access Control vulnerability was found in /smsa/admin_dashboard.php in Kashipara Responsive Schoo
CVE-2024-41245 MEDIUM 5.3 DOWNGRADE An Incorrect Access Control vulnerability was found in /smsa/view_teachers.php in Kashipara Responsive School
CVE-2024-41244 MEDIUM 5.3 DOWNGRADE An Incorrect Access Control vulnerability was found in /smsa/view_class.php in Kashipara Responsive School Man
CVE-2024-41243 MEDIUM 5.3 DOWNGRADE An Incorrect Access Control vulnerability was found in /smsa/view_marks.php in Kashipara Responsive School Man
CVE-2024-41242 MEDIUM 6.1 DOWNGRADE A Reflected Cross Site Scripting (XSS) vulnerability was found in /smsa/student_login.php in Kashipara Respons
CVE-2024-41241 MEDIUM 6.1 DOWNGRADE A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/admin_login.php" in Kashipara Respon
CVE-2024-41240 MEDIUM 6.1 DOWNGRADE A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/teacher_login.php" in Kashipara Resp
CVE-2024-41239 MEDIUM 4.8 DOWNGRADE A Stored Cross Site Scripting (XSS) vulnerability was found in "/smsa/add_class_submit.php" in Responsive Scho
CVE-2024-41238 MEDIUM 5.3 DOWNGRADE A SQL injection vulnerability in /smsa/student_login.php in Kashipara Responsive School Management System v1.0
CVE-2024-41237 CRITICAL 9.8 DOWNGRADE A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0
CVE-2024-41236 HIGH 7.2 DOWNGRADE A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management System v3.2.0
CVE-2024-40488 HIGH 8.8 DOWNGRADE A Cross-Site Request Forgery (CSRF) vulnerability was found in the Kashipara Live Membership System v1.0
CVE-2024-40487 HIGH 7.6 DOWNGRADE A Stored Cross Site Scripting (XSS) vulnerability was found in "/view_type.php" of Kashipara Live Membership S
CVE-2024-40486 CRITICAL 9.8 DOWNGRADE A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers
CVE-2024-40482 CRITICAL 9.8 DOWNGRADE An Unrestricted file upload vulnerability was found in "/Membership/edit_member.php" of Kashipara Live Members

FAQ

How do I fix lopalopa vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is lopalopa being exploited right now?

None of the tracked lopalopa CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which lopalopa CVE should I patch first?

CVE-2024-40482 currently ranks highest (61/100): An Unrestricted file upload vulnerability was found in "/Membership/edit_member.php" of Kashipara Live Members.

Products

RSS feed for lopalopa · ← Back to latest CVEs