Incorrect Access Control in Kashipara Music Management System
CVE-2024-42794
Currently unrated
What is CVE-2024-42794?
The Kashipara Music Management System version 1.0 is susceptible to incorrect access control through the endpoint /music/ajax.php?action=save_user. This vulnerability allows unauthorized users to manipulate user data and potentially gain access to restricted features, highlighting a critical need for improved access control measures within the system's design.
References
Timeline
Vulnerability published