CVE-2020-37084

Mô tả

Tham khảo

• web.archive.org/web/20190612111732/https://sourceforge.net/projects/school-erp-ultimate · Product
• web.archive.org/web/20200129123503/http://arox.in · Product
• exploit-db.com/exploits/48392 · Exploit
• vulncheck.com/advisories/school-erp-pro-admin-profile-photo-upload-remote-code-execution-vulnerability · Third Party Advisory

Lỗ hổng khác của school erp pro

• CVE-2020-37090NGHIÊM TRỌNG 9.8School ERP Pro 1.0 contains a file upload vulnerability that allows students to upload arbitrary PHP files to the messaging system. Attacker…
• CVE-2020-37089NGHIÊM TRỌNG 9.8School ERP Pro 1.0 contains a SQL injection vulnerability in the 'es_messagesid' parameter that allows attackers to manipulate database quer…
• CVE-2020-37088CAO 7.5School ERP Pro 1.0 contains a file disclosure vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating th…
• CVE-2022-32119CAO 8.8Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleri…
• CVE-2022-32118TRUNG BÌNH 6.1Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory parameter in backoffi…