Arox

School Erp Pro

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-4824

  • EPSS 1.84%
  • Published 14.05.2024 15:45:15
  • Last modified 21.11.2024 09:43:41

Vulnerability in School ERP Pro+Responsive 1.0 that allows SQL injection through the '/SchoolERP/office_admin/' index in the parameters groups_id, examname, classes_id, es_voucherid, es_class, etc. This vulnerability could allow a remote attacker to ...

6.5

CVE-2024-4823

  • EPSS 0.37%
  • Published 14.05.2024 15:45:14
  • Last modified 21.11.2024 09:43:41

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the index '/schoolerp/office_admin/' in the parameters es_bankacc, es_bank_name, es_bank_pin, es_checkno, es_teller_number, dc1 and dc2. An attacker could send a specially crafted Jav...

6.5

CVE-2024-4822

  • EPSS 0.13%
  • Published 14.05.2024 15:45:13
  • Last modified 21.11.2024 09:43:41

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability allows an attacker to partially take control of the victim's browser session.

8.8

CVE-2022-32119

Exploit
  • EPSS 11.74%
  • Published 15.07.2022 12:15:09
  • Last modified 21.11.2024 07:05:47

Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1finance_master.inc.php.

6.1

CVE-2022-32118

Exploit
  • EPSS 4.99%
  • Published 15.07.2022 12:15:08
  • Last modified 21.11.2024 07:05:47

Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory parameter in backoffice.inc.php.