← Back

School Erp Pro+responsive

school_erp_pro+responsive

Vendor: Arox • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-4824
1Arox
1School Erp Pro+responsive
Oct 23, 2025
May 14, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Vulnerability in School ERP Pro+Responsive 1.0 that allows SQL injection through the '/SchoolERP/office_admin/' index in the parameters groups_id, examname, classes_id, es_voucherid, es_class, etc. This vulnerability cou...Show more
Vulnerability in School ERP Pro+Responsive 1.0 that allows SQL injection through the '/SchoolERP/office_admin/' index in the parameters groups_id, examname, classes_id, es_voucherid, es_class, etc. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the database.Show less
CVE-2024-4823
1Arox
1School Erp Pro+responsive
Oct 23, 2025
May 14, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the index '/schoolerp/office_admin/' in the parameters es_bankacc, es_bank_name, es_bank_pin, es_checkno, es_teller_number, dc1 and dc2. An attacker coul...Show more
Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the index '/schoolerp/office_admin/' in the parameters es_bankacc, es_bank_name, es_bank_pin, es_checkno, es_teller_number, dc1 and dc2. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session.Show less
CVE-2024-4822
1Arox
1School Erp Pro+responsive
Oct 23, 2025
May 14, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability allows an attacker to partially take control of the victim's browser session.