CVE-2025-45321

Critical 8.8

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.php via the parameter: rPassword.

Published May 5, 2025.