Vulnerabilities (CVE)

Filtered by vendor Lopalopa Subscribe
Filtered by product Music Management System
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-42777 1 Lopalopa 1 Music Management System 2024-08-23 N/A 9.8 CRITICAL
An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVE-2024-42779 1 Lopalopa 1 Music Management System 2024-08-23 N/A 8.8 HIGH
An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file.