Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Kashipara Group — Vulnerabilities & Security Advisories 32

Browse all 32 CVE security advisories affecting Kashipara Group. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Kashipara Group operates as a provider of enterprise software solutions, primarily focusing on business process automation and data management systems for mid-to-large organizations. Historical security audits reveal a concerning pattern of vulnerabilities, with thirty-two Common Vulnerabilities and Exposures (CVEs) currently documented. The most prevalent issues involve remote code execution and cross-site scripting, indicating persistent weaknesses in input validation and server-side processing. Additionally, several instances of broken access control and privilege escalation have been recorded, suggesting inadequate enforcement of user permissions within the application architecture. While no single catastrophic data breach has been publicly attributed to the group, the cumulative nature of these flaws presents significant risk to client infrastructure. The organization’s security posture appears reactive rather than proactive, with patches often lagging behind the disclosure of critical exploits. This trend highlights a need for rigorous code review and automated security testing integration into their development lifecycle to mitigate ongoing exposure.

CVE ID Title CVSS Severity Published
CVE-2023-49641 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Billing Software CWE-89 9.8 Critical 2025-05-12
CVE-2023-50867 Travel Website v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Travel Website CWE-89 9.8 Critical 2024-01-04
CVE-2023-50866 Travel Website v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Travel Website CWE-89 9.8 Critical 2024-01-04
CVE-2023-50865 Travel Website v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Travel Website CWE-89 9.8 Critical 2024-01-04
CVE-2023-50864 Travel Website v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Travel Website CWE-89 9.8 Critical 2024-01-04
CVE-2023-50863 Travel Website v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Travel Website CWE-89 9.8 Critical 2024-01-04
CVE-2023-50862 Travel Website v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Travel Website CWE-89 9.8 Critical 2024-01-04
CVE-2023-50760 Online Notice Board System v1.0 - Insecure File Upload — Online Notice Board System CWE-434 8.8 High 2024-01-04
CVE-2023-50753 Online Notice Board System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Online Notice Board System CWE-89 9.8 Critical 2024-01-04
CVE-2023-50752 Online Notice Board System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Online Notice Board System CWE-89 9.8 Critical 2024-01-04
CVE-2023-50743 Online Notice Board System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Online Notice Board System CWE-89 9.8 Critical 2024-01-04
CVE-2023-49666 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Billing Software CWE-89 9.8 Critical 2024-01-04
CVE-2023-49665 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Billing Software CWE-89 9.8 Critical 2024-01-04
CVE-2023-49658 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Billing Software CWE-89 9.8 Critical 2024-01-04
CVE-2023-49639 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Billing Software CWE-89 9.8 Critical 2024-01-04
CVE-2023-49633 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Billing Software CWE-89 9.8 Critical 2024-01-04
CVE-2023-49625 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Billing Software CWE-89 9.8 Critical 2024-01-04
CVE-2023-49624 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Billing Software CWE-89 9.8 Critical 2024-01-04
CVE-2023-49622 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Billing Software CWE-89 9.8 Critical 2024-01-04
CVE-2023-49689 Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Job Portal CWE-89 9.8 Critical 2023-12-21
CVE-2023-49688 Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Job Portal CWE-89 9.8 Critical 2023-12-21
CVE-2023-49681 Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Job Portal CWE-89 9.8 Critical 2023-12-21
CVE-2023-49677 Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi) — Job Portal CWE-89 9.8 Critical 2023-12-21
CVE-2023-49272 Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS) — Hotel Management CWE-79 5.4 Medium 2023-12-20
CVE-2023-49271 Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS) — Hotel Management CWE-79 5.4 Medium 2023-12-20
CVE-2023-49270 Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS) — Hotel Management CWE-79 5.4 Medium 2023-12-20
CVE-2023-49269 Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS) — Hotel Management CWE-79 5.4 Medium 2023-12-20
CVE-2023-5007 Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi) — Student Information System CWE-89 8.8 High 2023-12-20
CVE-2023-5011 Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi) — Student Information System CWE-89 8.8 High 2023-12-20
CVE-2023-5010 Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi) — Student Information System CWE-89 8.8 High 2023-12-20

This page lists every published CVE security advisory associated with Kashipara Group. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.