Music Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:kashipara:music_management_system:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Kashipara (6b7db86c-2a94-5a2d-adbe-6158c7191f84) |
|---|---|
| Product | Music Management System (aae55105-2f20-5f62-a880-70441b2833e6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-42797 |
vulnerable | 2026-06-03 14:56:42.990888 |
Details available
An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music playlist entries.
Published: 2024-09-24T00:00:00.000Z
Updated: 2024-09-24T18:28:14.879Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42792 |
vulnerable | 2026-06-03 14:56:42.988939 |
Details available
A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=delete_playlist page.
Published: 2024-08-26T00:00:00.000Z
Updated: 2024-08-26T17:23:37.103Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42791 |
vulnerable | 2026-06-03 14:56:42.988553 |
Details available
A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.php?action=delete_genre.
Published: 2024-08-26T00:00:00.000Z
Updated: 2024-08-26T18:48:30.217Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42790 |
vulnerable | 2026-06-03 14:56:42.988181 |
Details available
A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/index.php?page=test" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via the "page" parameter.
Published: 2024-08-26T00:00:00.000Z
Updated: 2024-08-27T14:00:44.890Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42789 |
vulnerable | 2026-06-03 14:56:42.987779 |
Details available
A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/controller.php?page=test" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via the "page" parameter.
Published: 2024-08-26T00:00:00.000Z
Updated: 2024-08-27T19:39:00.292Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42788 |
vulnerable | 2026-06-03 14:56:42.987422 |
Details available
A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via "title" & "artist" parameter fields.
Published: 2024-08-26T00:00:00.000Z
Updated: 2024-08-26T19:08:48.462Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42787 |
vulnerable | 2026-06-03 14:56:42.987053 |
Details available
A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute arbitrary code via "title" & "description" parameter fields.
Published: 2024-08-26T00:00:00.000Z
Updated: 2024-08-26T15:24:53.044Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42783 |
vulnerable | 2026-06-03 14:56:42.985259 |
Details available
Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php. An attacker can execute arbitrary SQL commands via the "pid" parameter.
Published: 2024-08-21T00:00:00.000Z
Updated: 2024-08-22T16:44:52.478Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42781 |
vulnerable | 2026-06-03 14:56:42.984413 |
Details available
A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email parameter.
Published: 2024-08-21T00:00:00.000Z
Updated: 2024-08-22T13:46:18.639Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42780 |
vulnerable | 2026-06-03 14:56:42.983879 |
Details available
An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_genre" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file.
Published: 2024-08-21T00:00:00.000Z
Updated: 2024-08-22T18:53:02.406Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.