Vulnerabilities in krishaweb software