Arox kayıtları
arox üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-287 Improper Authentication1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
45Planlayın | CVE-2019-13294Kavram kanıtı | AROX School-ERP Pro has a command execution vulnerability.arox · school-erp · CWE-287 | Kritik9,8 | — | %18,8 | 4 Tem 2019 |
40Planlayın | CVE-2017-15978Kavram kanıtı | AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter.arox · school erp php script · CWE-89 | Kritik9,8 | — | %2,7 | 31 Eki 2017 |
39İzleyin | CVE-2024-4824İstismar yok | SQL Injection in School ERP Pro+Responsive by AROX SOLUTIONarox · school erp pro\+responsive · CWE-89 | Kritik9,8 | — | %0,7 | 14 May 2024 |
36İzleyin | CVE-2022-32119Kavram kanıtı | Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleriarox · school erp pro · CWE-434 | Yüksek8,8 | — | %2,0 | 15 Tem 2022 |
35İzleyin | CVE-2020-37088İstismar yok | School ERP Pro 1.0 - Arbitrary File Readarox · school erp pro · CWE-22 | Yüksek8,7 | — | %2,7 | 3 Şub 2026 |
34İzleyin | CVE-2020-37084İstismar yok | School ERP Pro 1.0 Admin Profile Photo Upload Remote Code Execution Vulnerabilityarox · school erp pro · CWE-434 | Yüksek8,6 | — | %0,9 | 3 Şub 2026 |
34İzleyin | CVE-2020-37090İstismar yok | School ERP Pro 1.0 - Remote Code Executionarox · school erp pro · CWE-434 | Yüksek8,7 | — | %0,8 | 3 Şub 2026 |
28İzleyin | CVE-2020-37089İstismar yok | School ERP Pro 1.0 - 'es_messagesid' SQL Injectionarox · school erp pro · CWE-89 | Yüksek7,1 | — | %0,4 | 3 Şub 2026 |
26İzleyin | CVE-2020-8505Kavram kanıtı | School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin CSRF to delete a user.arox · school management software php\/mysql · CWE-352 | Orta6,5 | — | %1,1 | 31 Oca 2020 |
26İzleyin | CVE-2020-8504Kavram kanıtı | School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrative user.arox · school management software php\/mysql · CWE-352 | Orta6,5 | — | %1,1 | 31 Oca 2020 |
24İzleyin | CVE-2022-32118Kavram kanıtı | Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory parameter in backoffiarox · school erp pro · CWE-79 | Orta6,1 | — | %1,1 | 15 Tem 2022 |
24İzleyin | CVE-2024-4823İstismar yok | Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTIONarox · school erp pro\+responsive · CWE-79 | Orta6,1 | — | %0,5 | 14 May 2024 |
24İzleyin | CVE-2024-4822İstismar yok | Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTIONarox · school erp pro\+responsive · CWE-79 | Orta6,1 | — | %0,4 | 14 May 2024 |
- CVE-2019-1329445Planlayın
AROX School-ERP Pro has a command execution vulnerability.
KritikCVSS 9,8Kavram kanıtıEPSS %19arox · school-erp4 Tem 2019
- CVE-2017-1597840Planlayın
AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter.
KritikCVSS 9,8Kavram kanıtıEPSS %3arox · school erp php script31 Eki 2017
- CVE-2024-482439İzleyin
SQL Injection in School ERP Pro+Responsive by AROX SOLUTION
KritikCVSS 9,8İstismar yokEPSS %1arox · school erp pro\+responsive14 May 2024
- CVE-2022-3211936İzleyin
Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleri
YüksekCVSS 8,8Kavram kanıtıEPSS %2arox · school erp pro15 Tem 2022
- CVE-2020-3708835İzleyin
School ERP Pro 1.0 - Arbitrary File Read
YüksekCVSS 8,7İstismar yokEPSS %3arox · school erp pro3 Şub 2026
- CVE-2020-3708434İzleyin
School ERP Pro 1.0 Admin Profile Photo Upload Remote Code Execution Vulnerability
YüksekCVSS 8,6İstismar yokEPSS %1arox · school erp pro3 Şub 2026
- CVE-2020-3709034İzleyin
School ERP Pro 1.0 - Remote Code Execution
YüksekCVSS 8,7İstismar yokEPSS %1arox · school erp pro3 Şub 2026
- CVE-2020-3708928İzleyin
School ERP Pro 1.0 - 'es_messagesid' SQL Injection
YüksekCVSS 7,1İstismar yokEPSS %0arox · school erp pro3 Şub 2026
- CVE-2020-850526İzleyin
School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin CSRF to delete a user.
OrtaCVSS 6,5Kavram kanıtıEPSS %1arox · school management software php\/mysql31 Oca 2020
- CVE-2020-850426İzleyin
School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrative user.
OrtaCVSS 6,5Kavram kanıtıEPSS %1arox · school management software php\/mysql31 Oca 2020
- CVE-2022-3211824İzleyin
Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory parameter in backoffi
OrtaCVSS 6,1Kavram kanıtıEPSS %1arox · school erp pro15 Tem 2022
- CVE-2024-482324İzleyin
Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION
OrtaCVSS 6,1İstismar yokEPSS %0arox · school erp pro\+responsive14 May 2024
- CVE-2024-482224İzleyin
Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION
OrtaCVSS 6,1İstismar yokEPSS %0arox · school erp pro\+responsive14 May 2024