Beveiligingsadvies

CVE-2020-37090

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-03 22:01:50

Laatst bijgewerkt 2026-03-05 01:27:52

Toegewezen door VulnCheck

CVSS-score 9.8

Status PUBLISHED

Beschrijving

School ERP Pro 1.0 contains a file upload vulnerability that allows students to upload arbitrary PHP files to the messaging system. Attackers can upload malicious PHP scripts through the message attachment feature, enabling remote code execution on the server.

← Alle CVE's bekijken Bekijk op cve.org ↗