School ERP Pro vulnerabilities
2 known vulnerabilities in School ERP Pro from Arox. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest first
- 9.8 Critical severity
School ERP Pro+Responsive: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in School ERP Pro+Responsive 1.0 that allows SQL injection through the '/SchoolERP/office_admin/' index in the parameters groups_id, examname, classes_id, es_voucherid, es_class, etc. This vulnerability could allow a remote attacker to send a spe
- 8.8 High severity
School ERP Pro: Unrestricted Upload of File with Dangerous Type
Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1finance_master.inc.php.