| Package | Affected versions | Patched versions |
|---|---|---|
| school erp pro | = 1.0 |
School ERP Pro 1.0 contains a remote code execution vulnerability that allows authenticated admin users to upload arbitrary PHP files as profile photos by bypassing file extension checks. Attackers can exploit improper file validation in pre-editstudent.inc.php to execute arbitrary code on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free