← Database

CVE-2024-40486

CRITICAL CVSS: 9.8 Published: 2024-08-12 Modified: 2026-06-17

Description

A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email or password Login parameters.

Affected Platforms

Lopalopa Live Membership System

Weakness Type

CWE-89

References