AR
Vendor
Arox
13
CVEs
0
On KEV
0
New 30D
Products
SE9.8
School ERP Pro
Arox
6 CVEs0 on KEV0 new
SE9.8
School Erp Pro+responsive
Arox
3 CVEs0 on KEV0 new
SM6.5
School Management Software Php/mysql
Arox
2 CVEs0 on KEV0 new
SC9.8
School-erp
Arox
1 CVEs0 on KEV0 new
SE9.8
School Erp Php Script
Arox
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-37084 | SE School ERP Pro Arox | 7.2 | Feb 3 | School ERP Pro 1.0 Admin Profile Photo Upload Remote Code Execution Vulnerability |
| CVE-2020-37090 | SE School ERP Pro Arox | 9.8 | Feb 3 | School ERP Pro 1.0 - Remote Code Execution |
| CVE-2020-37089 | SE School ERP Pro Arox | 9.8 | Feb 3 | School ERP Pro 1.0 - 'es_messagesid' SQL Injection |
| CVE-2020-37088 | SE School ERP Pro Arox | 7.5 | Feb 3 | School ERP Pro 1.0 - Arbitrary File Read |
| CVE-2024-4824 | SE School Erp Pro+responsive Arox | 9.8 | May 14 | Vulnerability in School ERP Pro+Responsive 1.0 that allows SQL injection through the '/SchoolERP/office_admin/' index in the parameters groups_id, examname, classes_id,… |
| CVE-2024-4823 | SE School Erp Pro+responsive Arox | 6.1 | May 14 | Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the index '/schoolerp/office_admin/' in the parameters es_bankacc, es_bank_name, es_bank_pin, es_checkno,… |
| CVE-2024-4822 | SE School Erp Pro+responsive Arox | 6.1 | May 14 | Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php' |
| CVE-2022-32119 | SE School Erp Pro Arox | 8.8 | Jul 15 | Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel… |
| CVE-2022-32118 | SE School Erp Pro Arox | 6.1 | Jul 15 | Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory parameter in backoffice.inc.php |
| CVE-2020-8505 | SM School Management Software Php/mysql Arox | 6.5 | Jan 31 | School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin CSRF to delete a user |
| CVE-2020-8504 | SM School Management Software Php/mysql Arox | 6.5 | Jan 31 | School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrative user |
| CVE-2019-13294 | SC School-erp Arox | 9.8 | Jul 4 | AROX School-ERP Pro has a command execution vulnerability |
| CVE-2017-15978 | SE School Erp Php Script Arox | 9.8 | Oct 31 | AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter |