Skip to content

CVE-2017-15978 AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter.

CriticalCVSS 9.8 EPSS 2.7%
Published
Updated
Exploit status
No public exploit known

Description

AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter.

Affected products

ProductAffected versionsFixed in
arox school erp php script = 1.0 No fix listed

References

  • 43081 exploit third-party-advisory vdb-entry