Vulnerabilities (CVE)

Filtered by vendor Arox Subscribe
Filtered by product School-erp
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-13294 1 Arox 1 School-erp 2024-02-28 10.0 HIGH 9.8 CRITICAL
AROX School-ERP Pro has a command execution vulnerability. import_stud.php and upload_fille.php do not have session control. Therefore an unauthenticated user can execute a command on the system.