← Database

CVE-2024-42786

HIGH CVSS: 8.8 Published: 2024-08-21 Modified: 2026-06-17

Description

A SQL injection vulnerability in "/music/view_user.php" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter of View User Profile Page.

Affected Platforms

Lopalopa Music Management System

Weakness Type

CWE-89, CWE-89

References