CVE-2022-32119

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-07-15 · updated 2026-07-09
Weakness: CWE-434

Description

Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1finance_master.inc.php.

Affected products

Arox School ERP Pro: 1.0

References

https://github.com/JC175/CVE-2022-32119
https://github.com/JC175/CVE-2022-32119

Get alerted when CVE-2022-32119 or the next vulnerability affects your stack