Approved changes feed: RSS · Atom

cpe:2.3:a:kashipara:music_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKashipara (6b7db86c-2a94-5a2d-adbe-6158c7191f84)
ProductMusic Management System (aae55105-2f20-5f62-a880-70441b2833e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-42798 vulnerable 2026-06-08 06:45:47.003602 Details available
An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_user in Kashipara Music Management System v1.0. This allows a low privileged attacker to take over the administrator account.
Published: 2024-09-16T00:00:00.000Z
Updated: 2024-09-18T15:41:30.912Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42796 vulnerable 2026-06-08 06:45:47.002859 Details available
An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music genre entries.
Published: 2024-09-16T00:00:00.000Z
Updated: 2024-09-18T15:46:11.442Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42795 vulnerable 2026-06-08 06:45:47.002211 Details available
An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_user&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to view valid user details.
Published: 2024-09-16T00:00:00.000Z
Updated: 2024-09-18T15:48:48.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42794 vulnerable 2026-06-08 06:45:47.001764 Details available
Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax.php?action=save_user.
Published: 2024-09-16T00:00:00.000Z
Updated: 2024-09-18T18:32:13.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42793 vulnerable 2026-06-08 06:45:47.001222 Details available
A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via a crafted request to the /music/ajax.php?action=save_user page.
Published: 2024-08-28T00:00:00.000Z
Updated: 2024-08-28T20:01:46.176Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42786 vulnerable 2026-06-08 06:45:46.997462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42785 vulnerable 2026-06-08 06:45:46.993615 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42784 vulnerable 2026-06-08 06:45:46.993046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42782 vulnerable 2026-06-08 06:45:46.991895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42779 vulnerable 2026-06-08 06:45:46.987906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42777 vulnerable 2026-06-08 06:45:46.984960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.