CVE-2017-15978

Critical

Published: 31/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

AROX School ERP PHP Script version 1.0 allows SQL Injection via the office_admin/id parameter.

Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.

It is recommended to update the script to the latest version and implement input data filtering to prevent SQL Injection attacks.

Original NVD description (English source)

AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter.