Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Arox records in CISA KEVNo Arox vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in School Management Software Php/mysql · all components
Priority LOW 31
School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin CSRF to delete a user.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01102 · Published 2020-01-31 · No fix listed CWE-352
Priority LOW 31
School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrative user.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01102 · Published 2020-01-31 · No fix listed CWE-352
