CVE-2024-4823

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the index '/schoolerp/officeadmin/' in the parameters esbankacc, esbankname, esbankpin, escheckno, estellernumber, dc1 and dc2. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially...

PT-2017-14332

Name of the Vulnerable Software and Affected Versions AROX School ERP PHP Script version 1.0 Description The issue allows SQL Injection via the id parameter in the office admin endpoint. Recommendations For AROX School ERP PHP Script version 1.0, consider restricting access to the office admin...