Filtered by vendor Arox Subscriptions
Filtered by product School Management Software Php\/mysql Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-8505 1 Arox 1 School Management Software Php\/mysql 2024-11-21 6.5 Medium
School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin CSRF to delete a user.
CVE-2020-8504 1 Arox 1 School Management Software Php\/mysql 2024-11-21 6.5 Medium
School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrative user.