https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5214.htmlhttps://patchthecve.com/cve/CVE-2025-5214.htmlWed, 17 Jun 2026 09:47:28 +0000HIGH 7.3: A vulnerability was found in Kashipara Responsive Online Learing Platform 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /courses/course_detail_user_new.php. The manipulation of the argument ID leads to sql injection. The attack may be launched rhttps://patchthecve.com/cve/CVE-2024-54938.htmlhttps://patchthecve.com/cve/CVE-2024-54938.htmlWed, 17 Jun 2026 08:10:50 +0000HIGH 7.5: A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attackers to access sensitive files and directories via /admin/uploads.https://patchthecve.com/cve/CVE-2024-54934.htmlhttps://patchthecve.com/cve/CVE-2024-54934.htmlWed, 17 Jun 2026 08:10:49 +0000CRITICAL 9.8: Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_class.php.https://patchthecve.com/cve/CVE-2024-54932.htmlhttps://patchthecve.com/cve/CVE-2024-54932.htmlWed, 17 Jun 2026 08:10:49 +0000CRITICAL 9.8: Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_department.php.https://patchthecve.com/cve/CVE-2024-54931.htmlhttps://patchthecve.com/cve/CVE-2024-54931.htmlWed, 17 Jun 2026 08:10:48 +0000CRITICAL 9.8: A SQL Injection was found in /admin/delete_event.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id parameter.https://patchthecve.com/cve/CVE-2024-54928.htmlhttps://patchthecve.com/cve/CVE-2024-54928.htmlWed, 17 Jun 2026 08:10:48 +0000HIGH 7.2: kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_teacher.php,https://patchthecve.com/cve/CVE-2024-54927.htmlhttps://patchthecve.com/cve/CVE-2024-54927.htmlWed, 17 Jun 2026 08:10:48 +0000HIGH 7.2: Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_users.php.https://patchthecve.com/cve/CVE-2024-54925.htmlhttps://patchthecve.com/cve/CVE-2024-54925.htmlWed, 17 Jun 2026 08:10:47 +0000CRITICAL 9.8: A SQL Injection was found in /remove_sent_message.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id parameter.https://patchthecve.com/cve/CVE-2024-54924.htmlhttps://patchthecve.com/cve/CVE-2024-54924.htmlWed, 17 Jun 2026 08:10:47 +0000CRITICAL 9.8: A SQL Injection was found in /admin/edit_content.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the title and content parameters.https://patchthecve.com/cve/CVE-2024-54923.htmlhttps://patchthecve.com/cve/CVE-2024-54923.htmlWed, 17 Jun 2026 08:10:47 +0000CRITICAL 9.8: A SQL Injection vulnerability was found in /admin/edit_teacher.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the department parameter.https://patchthecve.com/cve/CVE-2024-54921.htmlhttps://patchthecve.com/cve/CVE-2024-54921.htmlWed, 17 Jun 2026 08:10:47 +0000CRITICAL 9.8: A SQL Injection was found in /student_signup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username, firstname, lastname, and class_id parameters.https://patchthecve.com/cve/CVE-2024-54918.htmlhttps://patchthecve.com/cve/CVE-2024-54918.htmlWed, 17 Jun 2026 08:10:46 +0000CRITICAL 9.8: Kashipara E-learning Management System v1.0 is vulnerable to Remote Code Execution via File Upload in /teacher_avatar.php.https://patchthecve.com/cve/CVE-2024-54935.htmlhttps://patchthecve.com/cve/CVE-2024-54935.htmlWed, 17 Jun 2026 08:10:49 +0000MEDIUM 5.4: A Stored Cross-Site Scripting (XSS) vulnerability was found in /send_message_teacher_to_student.php of kashipara E-learning Management System v1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the my_message parameter.https://patchthecve.com/cve/CVE-2024-54933.htmlhttps://patchthecve.com/cve/CVE-2024-54933.htmlWed, 17 Jun 2026 08:10:49 +0000HIGH 7.2: Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_content.php.https://patchthecve.com/cve/CVE-2024-54930.htmlhttps://patchthecve.com/cve/CVE-2024-54930.htmlWed, 17 Jun 2026 08:10:48 +0000HIGH 7.2: Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_student.php.https://patchthecve.com/cve/CVE-2024-54922.htmlhttps://patchthecve.com/cve/CVE-2024-54922.htmlWed, 17 Jun 2026 08:10:47 +0000HIGH 7.2: A SQL Injection was found in /admin/edit_user.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the firstname, lastname, and username parameters.https://patchthecve.com/cve/CVE-2024-54926.htmlhttps://patchthecve.com/cve/CVE-2024-54926.htmlWed, 17 Jun 2026 08:10:48 +0000HIGH 8.8: A SQL Injection vulnerability was found in /search_class.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the school_year parameter.https://patchthecve.com/cve/CVE-2024-54920.htmlhttps://patchthecve.com/cve/CVE-2024-54920.htmlWed, 17 Jun 2026 08:10:47 +0000CRITICAL 9.8: A SQL Injection vulnerability was found in /teacher_signup.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the firstname, lastname, and class_id parameters.https://patchthecve.com/cve/CVE-2024-54919.htmlhttps://patchthecve.com/cve/CVE-2024-54919.htmlWed, 17 Jun 2026 08:10:47 +0000MEDIUM 5.4: A Stored Cross Site Scripting (XSS ) was found in /teacher_avatar.php of kashipara E-learning Management System v1.0. This vulnerability allows remote attackers to execute arbitrary java script via the filename parameter.https://patchthecve.com/cve/CVE-2024-54937.htmlhttps://patchthecve.com/cve/CVE-2024-54937.htmlWed, 17 Jun 2026 08:10:49 +0000MEDIUM 5.3: A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attackers to access sensitive files and directories via /admin/assets.https://patchthecve.com/cve/CVE-2024-54936.htmlhttps://patchthecve.com/cve/CVE-2024-54936.htmlWed, 17 Jun 2026 08:10:49 +0000MEDIUM 5.4: A Stored Cross-Site Scripting (XSS) vulnerability was found in /send_message.php of Kashipara E-learning Management System v1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the my_message parameter.https://patchthecve.com/cve/CVE-2024-54929.htmlhttps://patchthecve.com/cve/CVE-2024-54929.htmlWed, 17 Jun 2026 08:10:48 +0000HIGH 7.2: KASHIPARA E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_subject.php.https://patchthecve.com/cve/CVE-2024-50831.htmlhttps://patchthecve.com/cve/CVE-2024-50831.htmlWed, 17 Jun 2026 08:05:05 +0000HIGH 7.2: A SQL Injection was found in /admin/admin_user.php in kashipara E-learning Management System Project 1.0 via the username and password parameters.https://patchthecve.com/cve/CVE-2024-50830.htmlhttps://patchthecve.com/cve/CVE-2024-50830.htmlWed, 17 Jun 2026 08:05:05 +0000HIGH 7.2: A SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara E-learning Management System Project 1.0 via the date_start, date_end, and title parameters.https://patchthecve.com/cve/CVE-2024-50829.htmlhttps://patchthecve.com/cve/CVE-2024-50829.htmlWed, 17 Jun 2026 08:05:04 +0000HIGH 7.2: A SQL Injection vulnerability was found in /admin/edit_subject.php in kashipara E-learning Management System Project 1.0 via the unit parameter.https://patchthecve.com/cve/CVE-2024-50828.htmlhttps://patchthecve.com/cve/CVE-2024-50828.htmlWed, 17 Jun 2026 08:05:04 +0000HIGH 7.2: A SQL Injection vulnerability was found in /admin/edit_department.php in kashipara E-learning Management System Project 1.0 via the d parameter.https://patchthecve.com/cve/CVE-2024-50827.htmlhttps://patchthecve.com/cve/CVE-2024-50827.htmlWed, 17 Jun 2026 08:05:04 +0000HIGH 7.2: A SQL Injection vulnerability was found in /admin/add_subject.php in kashipara E-learning Management System Project 1.0 via the subject_code parameter.https://patchthecve.com/cve/CVE-2024-50826.htmlhttps://patchthecve.com/cve/CVE-2024-50826.htmlWed, 17 Jun 2026 08:05:04 +0000HIGH 7.2: A SQL Injection vulnerability was found in /admin/add_content.php in kashipara E-learning Management System Project 1.0 via the title and content parameters.https://patchthecve.com/cve/CVE-2024-50825.htmlhttps://patchthecve.com/cve/CVE-2024-50825.htmlWed, 17 Jun 2026 08:05:04 +0000HIGH 7.2: A SQL Injection vulnerability was found in /admin/school_year.php in kashipara E-learning Management System Project 1.0 via the school_year parameter.https://patchthecve.com/cve/CVE-2024-50824.htmlhttps://patchthecve.com/cve/CVE-2024-50824.htmlWed, 17 Jun 2026 08:05:04 +0000HIGH 7.2: A SQL Injection vulnerability was found in /admin/class.php in kashipara E-learning Management System Project 1.0 via the class_name parameter.https://patchthecve.com/cve/CVE-2024-50823.htmlhttps://patchthecve.com/cve/CVE-2024-50823.htmlWed, 17 Jun 2026 08:05:04 +0000CRITICAL 9.8: A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and password parameters.https://patchthecve.com/cve/CVE-2024-50836.htmlhttps://patchthecve.com/cve/CVE-2024-50836.htmlWed, 17 Jun 2026 08:05:06 +0000MEDIUM 4.8: A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and lastname parameters.https://patchthecve.com/cve/CVE-2024-50835.htmlhttps://patchthecve.com/cve/CVE-2024-50835.htmlWed, 17 Jun 2026 08:05:05 +0000HIGH 7.2: A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parameters.https://patchthecve.com/cve/CVE-2024-50834.htmlhttps://patchthecve.com/cve/CVE-2024-50834.htmlWed, 17 Jun 2026 08:05:05 +0000HIGH 7.2: A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters.https://patchthecve.com/cve/CVE-2024-50833.htmlhttps://patchthecve.com/cve/CVE-2024-50833.htmlWed, 17 Jun 2026 08:05:05 +0000CRITICAL 9.8: A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the username and password parameters.https://patchthecve.com/cve/CVE-2024-50832.htmlhttps://patchthecve.com/cve/CVE-2024-50832.htmlWed, 17 Jun 2026 08:05:05 +0000HIGH 7.2: A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning Management System Project 1.0 via the class_name parameter.https://patchthecve.com/cve/CVE-2024-50838.htmlhttps://patchthecve.com/cve/CVE-2024-50838.htmlWed, 17 Jun 2026 08:05:06 +0000MEDIUM 5.4: A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/department.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the d and pi parameters.https://patchthecve.com/cve/CVE-2024-50837.htmlhttps://patchthecve.com/cve/CVE-2024-50837.htmlWed, 17 Jun 2026 08:05:06 +0000MEDIUM 5.4: A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/admin_user.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and username parameters.https://patchthecve.com/cve/CVE-2024-50842.htmlhttps://patchthecve.com/cve/CVE-2024-50842.htmlWed, 17 Jun 2026 08:05:06 +0000MEDIUM 5.4: A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/school_year.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the school_year parameter.https://patchthecve.com/cve/CVE-2024-50841.htmlhttps://patchthecve.com/cve/CVE-2024-50841.htmlWed, 17 Jun 2026 08:05:06 +0000MEDIUM 5.4: A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/calendar_of_events.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the date_start, date_end, and title parameters.https://patchthecve.com/cve/CVE-2024-50840.htmlhttps://patchthecve.com/cve/CVE-2024-50840.htmlWed, 17 Jun 2026 08:05:06 +0000MEDIUM 5.4: A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/class.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the class_name parameter.https://patchthecve.com/cve/CVE-2024-50839.htmlhttps://patchthecve.com/cve/CVE-2024-50839.htmlWed, 17 Jun 2026 08:05:06 +0000MEDIUM 5.4: A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/add_subject.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the subject_code and title parameters.https://patchthecve.com/cve/CVE-2024-42797.htmlhttps://patchthecve.com/cve/CVE-2024-42797.htmlWed, 17 Jun 2026 07:50:02 +0000CRITICAL 9.8: An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music playlist entries.https://patchthecve.com/cve/CVE-2024-42798.htmlhttps://patchthecve.com/cve/CVE-2024-42798.htmlWed, 17 Jun 2026 07:50:03 +0000HIGH 7.6: An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_user in Kashipara Music Management System v1.0. This allows a low privileged attacker to take over the administrator account.https://patchthecve.com/cve/CVE-2024-42796.htmlhttps://patchthecve.com/cve/CVE-2024-42796.htmlWed, 17 Jun 2026 07:50:02 +0000MEDIUM 5.9: An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music genre entries.https://patchthecve.com/cve/CVE-2024-42795.htmlhttps://patchthecve.com/cve/CVE-2024-42795.htmlWed, 17 Jun 2026 07:50:02 +0000MEDIUM 4.2: An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_user&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to view valid user details.https://patchthecve.com/cve/CVE-2024-42794.htmlhttps://patchthecve.com/cve/CVE-2024-42794.htmlWed, 17 Jun 2026 07:50:02 +0000MEDIUM 4.7: Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax.php?action=save_user.https://patchthecve.com/cve/CVE-2024-42793.htmlhttps://patchthecve.com/cve/CVE-2024-42793.htmlWed, 17 Jun 2026 07:50:02 +0000HIGH 8.0: A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via a crafted request to the /music/ajax.php?action=save_user page.https://patchthecve.com/cve/CVE-2024-41236.htmlhttps://patchthecve.com/cve/CVE-2024-41236.htmlWed, 17 Jun 2026 07:47:27 +0000HIGH 7.2: A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Pagehttps://patchthecve.com/cve/CVE-2024-42792.htmlhttps://patchthecve.com/cve/CVE-2024-42792.htmlWed, 17 Jun 2026 07:50:01 +0000LOW 3.5: A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=delete_playlist page.