AR
Vendor
Arox
16
CVEs
0
On KEV
0
New 30D
Products
SE9.8
School ERP Pro
Arox
9 CVEs0 on KEV0 new
SE9.8
School Erp Pro+responsive
Arox
3 CVEs0 on KEV0 new
SM6.5
School Management Software Php/mysql
Arox
2 CVEs0 on KEV0 new
SC9.8
School-erp
Arox
1 CVEs0 on KEV0 new
SE9.8
School Erp Php Script
Arox
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-37084 | SE School ERP Pro Arox | 7.2 | Feb 3 | School ERP Pro 1.0 Admin Profile Photo Upload Remote Code Execution Vulnerability |
| CVE-2020-37090 | SE School ERP Pro Arox | 9.8 | Feb 3 | School ERP Pro 1.0 - Remote Code Execution |
| CVE-2020-37089 | SE School ERP Pro Arox | 9.8 | Feb 3 | School ERP Pro 1.0 - 'es_messagesid' SQL Injection |
| CVE-2020-37088 | SE School ERP Pro Arox | 7.5 | Feb 3 | School ERP Pro 1.0 - Arbitrary File Read |
| CVE-2024-4824 | SE School Erp Pro+responsive Arox | 9.8 | May 13 | SQL Injection in School ERP Pro+Responsive by AROX SOLUTION |
| CVE-2024-4823 | SE School Erp Pro+responsive Arox | 6.1 | May 13 | Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION |
| CVE-2024-4822 | SE School Erp Pro+responsive Arox | 6.1 | May 13 | Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION |
| CVE-2022-32119 | SE School Erp Pro Arox | 8.8 | Jul 15 | Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel… |
| CVE-2022-32118 | SE School Erp Pro Arox | 6.1 | Jul 15 | Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory parameter in backoffice.inc.php |
| CVE-2020-8505 | SM School Management Software Php/mysql Arox | 6.5 | Jan 31 | School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin CSRF to delete a user |
| CVE-2020-8504 | SM School Management Software Php/mysql Arox | 6.5 | Jan 31 | School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrative user |
| CVE-2019-13294 | SC School-erp Arox | 9.8 | Jul 4 | AROX School-ERP Pro has a command execution vulnerability |
| CVE-2017-15978 | SE School Erp Php Script Arox | 9.8 | Oct 31 | AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter |