Approved changes feed: RSS · Atom

cpe:2.3:a:kashipara:hotel_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorKashipara (6b7db86c-2a94-5a2d-adbe-6158c7191f84)
ProductHotel Management System (cef6bb5c-a70a-5113-a831-37f090f49399)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-42776 vulnerable 2026-06-03 14:56:42.976487 Details available
Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php.
Published: 2024-08-22T00:00:00.000Z
Updated: 2024-08-22T19:31:48.598Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42775 vulnerable 2026-06-03 14:56:42.976167 Details available
An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to add the valid hotel room entries in the administrator section via the direct URL access.
Published: 2024-08-22T00:00:00.000Z
Updated: 2024-08-22T19:49:31.835Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42774 vulnerable 2026-06-03 14:56:42.975840 Details available
An Incorrect Access Control vulnerability was found in /admin/delete_room.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to delete valid hotel room entries in the administrator section.
Published: 2024-08-22T00:00:00.000Z
Updated: 2024-08-22T20:00:48.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42773 vulnerable 2026-06-03 14:56:42.975287 Details available
An Incorrect Access Control vulnerability was found in /admin/edit_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to edit the valid hotel room entries in the administrator section.
Published: 2024-08-22T00:00:00.000Z
Updated: 2024-11-06T14:34:37.039Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42771 vulnerable 2026-06-03 14:56:42.974479 Details available
A Stored Cross Site Scripting (XSS) vulnerability was found in " /admin/edit_room_controller.php" of the Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via "room_name" parameter.
Published: 2024-08-22T00:00:00.000Z
Updated: 2024-08-22T19:43:17.562Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.