Filtered by vendor Arox Subscriptions
Filtered by product School-erp Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-13294 1 Arox 1 School-erp 2024-11-21 N/A
AROX School-ERP Pro has a command execution vulnerability. import_stud.php and upload_fille.php do not have session control. Therefore an unauthenticated user can execute a command on the system.