High · 8.8 CVE-2025-45321 EUVD-2025-13466GHSA-39hv-4jx8-pggm

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.php via the parameter…

Published May 5, 2025 · Updated May 5, 2025 · Assigned by mitre

Description

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.php via the parameter: rPassword.

References

https://github.com/0xBhushan/Writeups/blob/main/CVE/Kashipara/Online%20Service%20Management%20Portal/SQL%20Injection-Requesterchangepass.pdf