CVE-2020-37089

Mô tả

Tham khảo

• web.archive.org/web/20190612111732/https://sourceforge.net/projects/school-erp-ultimate · Product
• web.archive.org/web/20200129123503/http://arox.in · Product
• exploit-db.com/exploits/48390 · Exploit
• vulncheck.com/advisories/school-erp-pro-esmessagesid-sql-injection · Broken Link

Lỗ hổng khác của school erp pro

• CVE-2020-37084CAO 7.2School ERP Pro 1.0 contains a remote code execution vulnerability that allows authenticated admin users to upload arbitrary PHP files as pro…
• CVE-2020-37090NGHIÊM TRỌNG 9.8School ERP Pro 1.0 contains a file upload vulnerability that allows students to upload arbitrary PHP files to the messaging system. Attacker…
• CVE-2020-37088CAO 7.5School ERP Pro 1.0 contains a file disclosure vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating th…
• CVE-2022-32119CAO 8.8Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleri…
• CVE-2022-32118TRUNG BÌNH 6.1Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory parameter in backoffi…