CVE-2022-32118

概要

参考情報

• JC175/CVE-2022-32118 · Exploit
• arox.in · Vendor Advisory

school erp pro のその他の脆弱性

• CVE-2020-37084高 7.2School ERP Pro 1.0 contains a remote code execution vulnerability that allows authenticated admin users to upload arbitrary PHP files as pro…
• CVE-2020-37090緊急 9.8School ERP Pro 1.0 contains a file upload vulnerability that allows students to upload arbitrary PHP files to the messaging system. Attacker…
• CVE-2020-37089緊急 9.8School ERP Pro 1.0 contains a SQL injection vulnerability in the 'es_messagesid' parameter that allows attackers to manipulate database quer…
• CVE-2020-37088高 7.5School ERP Pro 1.0 contains a file disclosure vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating th…
• CVE-2022-32119高 8.8Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleri…