The School Manage System Security Vulnerabilities and Issues — The School Manage System CVE List

Lucene search

The School Manage System ProjectThe School Manage System

3 matches found

CVE•added 2020/04/15 7:15 a.m.•33 views

CVE-2020-10507

The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Unrestricted file upload (RCE) , that would allow attackers to gain access in the hosting machine.

9.8CVSS9.6AI score0.00418EPSS

CVE•added 2020/04/15 7:15 a.m.•29 views

CVE-2020-10506

The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Path Traversal, allowing attackers to access arbitrary files.

7.5CVSS7.5AI score0.00469EPSS

CVE•added 2020/04/15 7:15 a.m.•27 views

CVE-2020-10505

The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of SQL Injection, an attacker can use a union based injection query string to get databases schema and username/password.

9.8CVSS9.8AI score0.00307EPSS