Arox vulnerabilities
We track 2 vulnerabilities in Arox products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2024.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Arox vulnerabilities
- 9.8 Critical severity
School ERP Pro+Responsive: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in School ERP Pro+Responsive 1.0 that allows SQL injection through the '/SchoolERP/office_admin/' index in the parameters groups_id, examname, classes_id, es_voucherid, es_class, etc. This vulnerability could allow a remote attacker to send a spe
- 8.8 High severity
School ERP Pro: Unrestricted Upload of File with Dangerous Type
Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1finance_master.inc.php.