Lopalopa Online Service Management Portal — known CVE vulnerabilities

Every CVE whose affected-product data names Lopalopa Online Service Management Portal, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-45321 — CVSS 8.8 (high): kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.php via the…
• CVE-2025-45322 — CVSS 8.8 (high): kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter.
• CVE-2025-45320 — CVSS 5.3 (medium): A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0.