CVE-2022-32119

Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1finance_master.inc.php.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2022-07-15

Last modified

2026-07-09

Weaknesses

CWE-434

Affected products

• School Erp Pro (Arox)

References

• https://github.com/JC175/CVE-2022-32119