Design/Logic Flaw

2022-07-1512:15:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.7%

JSON

Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1finance_master.inc.php.

CPENameOperatorVersion
school_erp_proeq1.0

CPE	Name	Operator	Version
	school_erp_pro	eq	1.0

References

arox.com

school.com

github.com/JC175/CVE-2022-32119