lopalopa Vulnerability Advisory Catalog

Total 112 security vulnerabilities recorded for lopalopa software and firmware.

← Back to All Vendors
Component: music_management_system

An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_user&id=3 in Kashipara Music Mana...

📅 2024-09-16
CVSS 4.2 Dossier →
Component: music_management_system

Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax.php?action=save_user....

📅 2024-09-16
CVSS 4.7 Dossier →
Component: music_management_system

A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via a crafted request to the /music/ajax.php?act...

📅 2024-08-28
CVSS 8.0 Dossier →
Component: responsive_school_management_system

A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary...

📅 2024-08-28
CVSS 7.2 Dossier →
Component: music_management_system

A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=delete_playlist page....

📅 2024-08-26
CVSS 3.5 Dossier →
Component: music_management_system

A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/index.php?page=test" in Kashipara Music Management System v1.0. This vulnera...

📅 2024-08-26
CVSS 5.4 Dossier →
Component: music_management_system

A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=delete_genre....

📅 2024-08-26
CVSS 8.8 Dossier →
Component: music_management_system

A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This vul...

📅 2024-08-26
CVSS 6.1 Dossier →
Component: music_management_system

A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/controller.php?page=test" in Kashipara Music Management System v1.0. This vu...

📅 2024-08-26
CVSS 6.3 Dossier →
Component: music_management_system

A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0. This ...

📅 2024-08-26
CVSS 6.1 Dossier →
Component: music_management_system

A SQL injection vulnerability in "/music/view_user.php" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands...

📅 2024-08-21
CVSS 8.8 Dossier →
Component: music_management_system

A SQL injection vulnerability in /music/index.php?page=view_playlist in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary...

📅 2024-08-21
CVSS 8.8 Dossier →
CVE-2024-42784 CRITICAL
Component: music_management_system

A SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music Management System v1.0 allows an attacker to execute arbit...

📅 2024-08-21
CVSS 9.8 Dossier →
CVE-2024-42783 CRITICAL
Component: music_management_system

Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php. An attacker can execute arbitrary SQL comm...

📅 2024-08-21
CVSS 9.8 Dossier →
CVE-2024-42782 CRITICAL
Component: music_management_system

A SQL injection vulnerability in "/music/ajax.php?action=find_music" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary...

📅 2024-08-21
CVSS 9.8 Dossier →
CVE-2024-42781 CRITICAL
Component: music_management_system

A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote attackers to execute arbitrary...

📅 2024-08-21
CVSS 9.8 Dossier →
Component: music_management_system

An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_genre" in Kashipara Music Management System v1.0. This allows atta...

📅 2024-08-21
CVSS 8.8 Dossier →
Component: music_management_system

An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This allows atta...

📅 2024-08-21
CVSS 8.8 Dossier →
Component: music_management_system

An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0. This allows a...

📅 2024-08-21
CVSS 8.8 Dossier →
CVE-2024-42777 CRITICAL
Component: music_management_system

An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management System v1.0, which allows attacke...

📅 2024-08-21
CVSS 9.8 Dossier →
Component: live_membership_system

A Cross-Site Request Forgery (CSRF) vulnerability was found in the Kashipara Live Membership System v1.0. This could lead to an attacker tricking the ...

📅 2024-08-12
CVSS 8.8 Dossier →
Component: live_membership_system

A Stored Cross Site Scripting (XSS) vulnerability was found in "/view_type.php" of Kashipara Live Membership System v1.0, which allows remote attacker...

📅 2024-08-12
CVSS 7.6 Dossier →
CVE-2024-40486 CRITICAL
Component: live_membership_system

A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execute arbitrary SQL commands and b...

📅 2024-08-12
CVSS 9.8 Dossier →
CVE-2024-40482 CRITICAL
Component: live_membership_system

An Unrestricted file upload vulnerability was found in "/Membership/edit_member.php" of Kashipara Live Membership System v1.0, which allows attackers ...

📅 2024-08-12
CVSS 9.8 Dossier →
Page 3 of 5 (112 Total Records)