Read the docs

Schoolcms

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Schoolcms records in CISA KEV

No Schoolcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Schoolcms 5 records MEDIUM

Records

5 records

TI-2025-04291 CVE-2025-4795 · GHSA-jwx6-c8mf-mg73

gongfuxiang schoolcms index.php SaveInfo sql injection

Priority MEDIUM 56

A vulnerability classified as critical has been found in gongfuxiang schoolcms 2.3.1.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00491 Published 2025-05-16 No fix listed CWE-74
TI-2019-06992 CVE-2019-9572 · GHSA-mfrx-7vc3-c7fw

SchoolCMS version 2.3.1 allows file upload via the theme upload feature at…

Priority LOW 36

SchoolCMS version 2.3.1 allows file upload via the theme upload feature at admin.php?m=admin&c=theme&a=upload by using the .zip extension along with the _Static substring, changing the Content-Type to application/zip, an…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02031 Published 2019-03-05 No fix listed CWE-434
TI-2019-06641 CVE-2019-9181 · GHSA-5232-4rfr-54hc

SchoolCMS version 2.3.1 allows file upload via the logo upload feature at…

Priority LOW 36

SchoolCMS version 2.3.1 allows file upload via the logo upload feature at admin.php?m=admin&c=site&a=save by using the .jpg extension, changing the Content-Type to image/php, and placing PHP code after the JPEG data.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01989 Published 2019-02-26 No fix listed CWE-434
Open these records in search →