School ERP Pro vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SE

Product

School ERP Pro

by Arox · last CVE Feb 3, 2026

9

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 3High 3Medium 3Low 0

Severity

All severities9 Critical3 High3 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add School ERP Pro to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-37090	9.8	1%	Feb 3	School ERP Pro 1.0 - Remote Code Execution Affected: 1.0
CVE-2020-37089	9.8	0%	Feb 3	School ERP Pro 1.0 - 'es_messagesid' SQL Injection Affected: 1.0
CVE-2024-4824	9.8	1%	May 13	SQL Injection in School ERP Pro+Responsive by AROX SOLUTION Affected: 1.0
CVE-2022-32119	8.8	2%	Jul 15	Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel… Affected: 1.0
CVE-2020-37088	7.5	3%	Feb 3	School ERP Pro 1.0 - Arbitrary File Read Affected: 1.0
CVE-2020-37084	7.2	1%	Feb 3	School ERP Pro 1.0 Admin Profile Photo Upload Remote Code Execution Vulnerability Affected: 1.0
CVE-2024-4823	6.1	0%	May 13	Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION Affected: 1.0
CVE-2024-4822	6.1	0%	May 13	Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION Affected: 1.0
CVE-2022-32118	6.1	1%	Jul 15	Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory parameter in backoffice.inc.php Affected: 1.0