Arox vulnerabilities

Products

• School Erp Pro 9
• School Erp Pro 4
• School Erp Pro\+responsive 3
• School Management Software Php\/mysql 2

Newest

• arox school erp pro School ERP Pro 1.0 Admin Profile Photo Upload Remote Code Execution Vulnerability CVE-2020-37084 8.6 HighFebruary 3, 2026
• arox school erp pro School ERP Pro 1.0 - Remote Code Execution CVE-2020-37090 8.7 HighFebruary 3, 2026
• arox school erp pro School ERP Pro 1.0 - 'es_messagesid' SQL Injection CVE-2020-37089 7.1 HighFebruary 3, 2026
• arox school erp pro School ERP Pro 1.0 - Arbitrary File Read CVE-2020-37088 8.7 HighFebruary 3, 2026
• arox school erp pro, arox solution school erp pro+responsive, arox school erp pro\+responsive +2 more SQL Injection in School ERP Pro+Responsive by AROX SOLUTION CVE-2024-4824 9.8 CriticalMay 13, 2024
• arox school erp pro, arox solution school erp pro+responsive, arox school erp pro\+responsive +2 more Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION CVE-2024-4823 6.5 MediumMay 13, 2024
• arox school erp pro, arox solution school erp pro+responsive, arox school erp pro\+responsive +2 more Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION CVE-2024-4822 6.5 MediumMay 13, 2024
• arox school erp pro Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via... CVE-2022-32118 Public exploit 6.1 MediumJuly 15, 2022
• arox school erp pro Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities... CVE-2022-32119 Public exploit 8.8 HighJuly 15, 2022
• arox school management software php\/mysql School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF... CVE-2020-8504 Public exploit 6.5 MediumJanuary 31, 2020
• arox school management software php\/mysql School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin... CVE-2020-8505 Public exploit 6.5 MediumJanuary 31, 2020
• arox school-erp AROX School-ERP Pro has a command execution vulnerability. import_stud.php and upload_fille.php... CVE-2019-13294 Public exploit EPSS 18.8% 9.8 CriticalJuly 4, 2019
• arox school erp php script AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter. CVE-2017-15978 Public exploit 9.8 CriticalOctober 31, 2017