Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2020-10507

ALLE INFORMATION CO., LTD. School Manage System - Security Misconfiguration

The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Unrestricted file upload (RCE) , that would allow attackers to gain access in the hosting machine.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
The School Manage System Project
Products
The School Manage System
CVE-2020-10506

ALLE INFORMATION CO., LTD. School Manage System - Path Traversal

The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Path Traversal, allowing attackers to access arbitrary files.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
The School Manage System Project
Products
The School Manage System
CVE-2020-10505

ALLE INFORMATION CO., LTD. School Manage System - SQL Injection

The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of SQL Injection, an attacker can use a union based injection query string to get databases schema and username/password.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
The School Manage System Project
Products
The School Manage System