medium5.9
CVE-2024-42796
An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music Management System v1.0.
Impact
An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music genre entries.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lopalopa | Music Management System | Version 1.0 |