← Database

CVE-2024-42778

HIGH CVSS: 8.8 Published: 2024-08-21 Modified: 2026-06-17

Description

An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file.

Affected Platforms

Lopalopa Music Management System

Weakness Type

CWE-434, CWE-434

References