CVE-2022-32119

Katalog CVE

CVSS 8.8 · High EPSS 2,0%

Kerentanan Unrestricted Upload of File with Dangerous Type pada arox school erp pro. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1finance_master.inc.php.

Rincian

Terbit di NVD

15 Juli 2022

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-434: Unrestricted Upload of File with Dangerous Type

EPSS (30 hari)

2,0% peluang dieksploitasi; lebih tinggi dari 79,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/JC175/CVE-2022-32119 exploit · advisory pihak ketiga