Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Schoolcms Clear all filters
TI-2025-04291 CVE-2025-4795 · GHSA-jwx6-c8mf-mg73

gongfuxiang schoolcms index.php SaveInfo sql injection

Priority MEDIUM 56

A vulnerability classified as critical has been found in gongfuxiang schoolcms 2.3.1.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00491 Published 2025-05-16 No fix listed CWE-74
TI-2019-06992 CVE-2019-9572 · GHSA-mfrx-7vc3-c7fw

SchoolCMS version 2.3.1 allows file upload via the theme upload feature at…

Priority LOW 36

SchoolCMS version 2.3.1 allows file upload via the theme upload feature at admin.php?m=admin&c=theme&a=upload by using the .zip extension along with the _Static substring, changing the Content-Type to application/zip, an…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02031 Published 2019-03-05 No fix listed CWE-434
TI-2019-06641 CVE-2019-9181 · GHSA-5232-4rfr-54hc

SchoolCMS version 2.3.1 allows file upload via the logo upload feature at…

Priority LOW 36

SchoolCMS version 2.3.1 allows file upload via the logo upload feature at admin.php?m=admin&c=site&a=save by using the .jpg extension, changing the Content-Type to image/php, and placing PHP code after the JPEG data.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01989 Published 2019-02-26 No fix listed CWE-434