← Database

CVE-2024-42777

CRITICAL CVSS: 9.8 Published: 2024-08-21 Modified: 2026-06-17

Description

An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file.

Affected Platforms

Lopalopa Music Management System

Weakness Type

CWE-434, CWE-434

References