Vulnerability Details CVE-2020-8505
School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin CSRF to delete a user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.7%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.3
References
Products affected by CVE-2020-8505
-
cpe:2.3:a:arox:school_management_software_php/mysql:-
-
cpe:2.3:a:arox:school_management_software_php/mysql:2019-03-14