Vulnerabilidades de Kashipara
CVEs publicadas que afetam produtos de Kashipara: 6 registro(s), com severidade, exploração e correções.
CVE-2026-26464
Média · 6.1
CWE-79 23/02/2026
Cross-site Scripting (XSS) em Kashipara Society Management System Portal
Stored Cross-Site Scripting (XSS) was found in the /admin/edit_user.php page of Society Management System Portal V1.0, which allows remote attackers to inject and store arbitrary JavaScript code that is executed in users' browsers. This vulnerability can be exploited via the name parameter in a POST HTTP request, leading to execution of malicious scripts when the affected content is viewed by other users, including administrators.
CVE-2024-44653
Média · 6.5
CWE-89 17/11/2025
SQL Injection em Kashipara Ecommerce Website
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php.
CVE-2024-44651
Média · 6.5
CWE-89 17/11/2025
SQL Injection em Kashipara Ecommerce Website
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recover_email parameter in user_password_recover.php.
CVE-2024-46336
Média · 6.1
CWE-79 17/11/2025
Cross-site Scripting (XSS) em Kashipara School Management System
kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /client_user/feedback.php.
CVE-2024-46334
Média · 6.1
CWE-79 17/11/2025
Cross-site Scripting (XSS) em Kashipara School Management System
kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the formuser and formpassword parameters in /adminLogin.php.
CVE-2024-44652
Média · 6.5
CWE-89 17/11/2025
SQL Injection em Kashipara Ecommerce Website
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, user_lastname, and user_address parameters in user_register.php.