School Management
EPC
Developer
N/A
Latest version
N/A
Installations
N/A
Last updated
Vulnerability history
15 present
6 fixed
15 Mitigation rules
- Authenticated (Student+) Arbitrary File Upload vulnerability<= 91.5.0Feb 4, 2026
- Authenticated (Student+) Arbitrary File Upload vulnerability<= 93.2.0Dec 31, 2025
- Unauthenticated SQL Injection vulnerability<= 93.2.0Aug 16, 2025
- Broken Access Control Vulnerability<= 93.2.0Aug 15, 2025
- Insecure Direct Object References (IDOR) Vulnerability<= 93.1.0Aug 15, 2025
- SQL Injection Vulnerability<= 93.2.0Aug 15, 2025
- Arbitrary File Upload Vulnerability<= 1.93.1 (02-07-2025)Aug 12, 2025
- Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update vulnerability<= 93.1.0Jul 18, 2025
- Reflected Cross Site Scripting (XSS) vulnerability<= 92.0.0Jun 18, 2025
- Privilege Escalation Vulnerability<= 93.2.0Jun 17, 2025
- Local File Inclusion Vulnerability<= 93.0.0Jun 12, 2025
- SQL Injection vulnerability<= 92.0.0Jun 11, 2025
- SQL Injection vulnerability<= 92.0.0May 20, 2025
- Reflected Cross Site Scripting (XSS) vulnerability<= 92.0.0May 20, 2025
- Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task' vulnerability<= 92.0.0Mar 7, 2025
- Authenticated (Student+) SQL Injection via 'view-attendance' vulnerability<= 92.0.0Mar 6, 2025
- Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability<= 93.0.0Mar 6, 2025
- Reflected Cross-Site Scripting vulnerability<= 93.0.0Mar 6, 2025
- Authenticated (Student+) Account Takeover and Privilege Escalation vulnerability<= 93.0.0Mar 6, 2025
- Unauthenticated Arbitrary File Upload vulnerability<= 91.5.0Nov 22, 2024
- Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS) vulnerabilities< 57.0Jul 13, 2019