Arox School ERP Pro 1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:arox:school_erp_pro:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Arox (8cf8b59c-02dd-5fca-81a1-0a12a85bb78e) |
|---|---|
| Product | School Erp Pro (f925a6c1-4589-5eda-b4b0-d2908032df30) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-4824 |
vulnerable | 2026-06-08 06:50:18.760436 |
SQL Injection in School ERP Pro+Responsive by AROX SOLUTION
CRITICAL (9.8)
Vulnerability in School ERP Pro+Responsive 1.0 that allows SQL injection through the '/SchoolERP/office_admin/' index in the parameters groups_id, examname, classes_id, es_voucherid, es_class, etc. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the database.
Published: 2024-05-13T11:29:37.151Z
Updated: 2024-08-01T20:55:09.885Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4823 |
vulnerable | 2026-06-08 06:50:18.759087 |
Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION
MEDIUM (6.5)
Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the index '/schoolerp/office_admin/' in the parameters es_bankacc, es_bank_name, es_bank_pin, es_checkno, es_teller_number, dc1 and dc2. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session.
Published: 2024-05-13T11:27:26.304Z
Updated: 2024-08-01T20:55:10.025Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4822 |
vulnerable | 2026-06-08 06:50:18.756847 |
Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION
MEDIUM (6.5)
Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability allows an attacker to partially take control of the victim's browser session.
Published: 2024-05-13T11:26:27.512Z
Updated: 2024-08-01T20:55:10.266Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32119 |
vulnerable | 2026-06-08 05:44:42.580747 |
Details available
Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1finance_master.inc.php.
Published: 2022-07-15T11:13:17.000Z
Updated: 2026-07-09T00:19:29.997Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32118 |
vulnerable | 2026-06-08 05:44:42.580190 |
Details available
Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory parameter in backoffice.inc.php.
Published: 2022-07-15T11:13:25.000Z
Updated: 2024-08-03T07:32:55.992Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37090 |
vulnerable | 2026-06-08 05:25:50.131606 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37089 |
vulnerable | 2026-06-08 05:25:50.131105 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37088 |
vulnerable | 2026-06-08 05:25:50.130694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37084 |
vulnerable | 2026-06-08 05:25:50.127045 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.