CVE-2024-4824

Vulnerability in School ERP Pro+Responsive 1.0 that allows SQL injection through the '/SchoolERP/officeadmin/' index in the parameters groupsid, examname, classesid, esvoucherid, esclass, etc. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and...

CVE-2024-4823

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the index '/schoolerp/officeadmin/' in the parameters esbankacc, esbankname, esbankpin, escheckno, estellernumber, dc1 and dc2. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially...

Web-School ERP SQL注入漏洞

Web-School ERP is an application from Web-School India. An ERP application. A SQL injection vulnerability exists in Web-School ERP version 1.0, which originates from a SQL injection vulnerability in the groupsid, examname, classesid, esvoucherid, esclass, etc parameters on the...

Web-School ERP 跨站脚本漏洞

Web-School ERP is an application from Web-School India, Inc. An ERP application. A cross-site scripting vulnerability exists in School ERP Pro+Responsive version 1.0, which originates from a cross-site scripting vulnerability in the /schoolerp/officeadmin/ page for the esbankacc, esbankname,...

PT-2024-33040

Name of the Vulnerable Software and Affected Versions School ERP Pro+Responsive version 1.0 Description The issue allows for cross-site scripting XSS attacks via the index '/schoolerp/office admin/' in the parameters es bankacc, es bank name, es bank pin, es checkno, es teller number, dc1, and dc...

PT-2024-33051

Name of the Vulnerable Software and Affected Versions School ERP Pro+Responsive version 1.0 Description The issue allows SQL injection through the "/SchoolERP/office admin/" index in parameters such as groups id, examname, classes id, es voucherid, es class, etc. This could enable a remote attack...

CVE-2021-25657

A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier versions...

CVE-2021-25657: Improper Privilege Management

A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier versions...

CVE-2020-8505

School Management Software PHP/mySQL through 2019-03-14 allows officeadmin/?action=deleteadmin CSRF to delete a user...

PT-2020-20182

Name of the Vulnerable Software and Affected Versions School Management Software PHP/mySQL through 2019-03-14 Description The issue allows an attacker to delete a user via a CSRF attack on the office admin/?action=deleteadmin endpoint. Recommendations For School Management Software PHP/mySQL...

PT-2020-20181

Name of the Vulnerable Software and Affected Versions School Management Software PHP/mySQL through 2019-03-14 Description The issue allows an attacker to add an administrative user via a CSRF attack on the office admin/?action=addadmin endpoint. Recommendations For School Management Software...

AROX School ERP PHP Script SQL Injection Vulnerability

AROX School ERP PHP Script is a web-based school management system. The system features enrollment management, class management, library management and fund management. A SQL injection vulnerability exists in AROX School ERP PHP Script version 1.0. A remote attacker can exploit this vulnerability...

CVE-2017-15978

AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...

PT-2017-14332

Name of the Vulnerable Software and Affected Versions AROX School ERP PHP Script version 1.0 Description The issue allows SQL Injection via the id parameter in the office admin endpoint. Recommendations For AROX School ERP PHP Script version 1.0, consider restricting access to the office admin...