Security Advisory

CVE-2024-42782

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-08-21 00:00:00
Last updated 2024-08-22 15:02:29
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

A SQL injection vulnerability in "/music/ajax.php?action=find_music" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "search" parameter.