CVE-2020-8504: Arox School Management Software Php/mysql

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrative user.

Affected products

• Arox School Management Software Php/mysql: up to and including 2019-03-14

Published 2020-01-31. Last modified 2026-06-17.