Read the docs

Arox

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Arox records in CISA KEV

No Arox vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
School Erp Pro 6 records HIGH School Erp Pro+responsive 3 records MEDIUM School Management Software Php/mysql 2 records LOW School-erp 1 record MEDIUM School Erp Php Script 1 record MEDIUM

Records

3 records in School Erp Pro+responsive · all components

TI-2024-04496 CVE-2024-4824 · GHSA-q2r8-99fj-x7qv

SQL Injection in School ERP Pro+Responsive by AROX SOLUTION

Priority MEDIUM 50

Vulnerability in School ERP Pro+Responsive 1.0 that allows SQL injection through the '/SchoolERP/office_admin/' index in the parameters groups_id, examname, classes_id, es_voucherid, es_class, etc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2024-05-13 No fix listed CWE-89
TI-2024-04495 CVE-2024-4823 · GHSA-wr68-32ff-7373

Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION

Priority LOW 29

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the index '/schoolerp/office_admin/' in the parameters es_bankacc, es_bank_name, es_bank_pin, es_checkno, es_teller_number, dc1 and dc2.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00471 Published 2024-05-13 No fix listed CWE-79
Open these records in search →