Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor The School Manage System Project Subscribe
Filtered by product The School Manage System
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-10507 1 The School Manage System Project 1 The School Manage System 2020-04-30 7.5 HIGH 9.8 CRITICAL
The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Unrestricted file upload (RCE) , that would allow attackers to gain access in the hosting machine.
CVE-2020-10505 1 The School Manage System Project 1 The School Manage System 2020-04-30 7.5 HIGH 9.8 CRITICAL
The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of SQL Injection, an attacker can use a union based injection query string to get databases schema and username/password.
CVE-2020-10506 1 The School Manage System Project 1 The School Manage System 2020-04-30 5.0 MEDIUM 7.5 HIGH
The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Path Traversal, allowing attackers to access arbitrary files.