CVE-2022-32119

Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1finance_master.inc.php.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

1.95% chance of exploitation in the next 30 days, 79th percentile

Published

2022-07-15

Updated

2026-07-09

Proof-of-concept exploits (1)

• JC175/CVE-2022-3211917★ · 2023-12-20

References

• CVE Record
• NVD entry

Related

• CVE-2022-32118
• CVE-2022-37177
• CVE-2022-3212
• CVE-2022-32115
• CVE-2022-32159
• CVE-2022-32114