Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1finance_master.inc.php.
References
| Link | Resource |
|---|---|
| http://arox.com | Not Applicable |
| http://school.com | Not Applicable |
| https://github.com/JC175/CVE-2022-32119 | Exploit Third Party Advisory |
| http://arox.com | Not Applicable |
| http://school.com | Not Applicable |
| https://github.com/JC175/CVE-2022-32119 | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 07:05
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://arox.com - Not Applicable | |
| References | () http://school.com - Not Applicable | |
| References | () https://github.com/JC175/CVE-2022-32119 - Exploit, Third Party Advisory |
22 Jul 2022, 16:45
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-434 | |
| CPE | cpe:2.3:a:arox:school_erp_pro:1.0:*:*:*:*:*:*:* | |
| References | (MISC) http://arox.com - Not Applicable | |
| References | (MISC) http://school.com - Not Applicable | |
| References | (MISC) https://github.com/JC175/CVE-2022-32119 - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
15 Jul 2022, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-07-15 12:15
Updated : 2024-11-21 07:05
NVD link : CVE-2022-32119
Mitre link : CVE-2022-32119
CVE.ORG link : CVE-2022-32119
JSON object : View
Products Affected
arox
- school_erp_pro
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type