PatchTheCVE: the school manage system projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-10507: The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Unrhttps://patchthecve.com/cve/CVE-2020-10507.htmlhttps://patchthecve.com/cve/CVE-2020-10507.htmlWed, 17 Jun 2026 02:47:55 +0000CRITICAL 9.8: The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Unrestricted file upload (RCE) , that would allow attackers to gain access in the hosting machine.CVE-2020-10506: The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Pathttps://patchthecve.com/cve/CVE-2020-10506.htmlhttps://patchthecve.com/cve/CVE-2020-10506.htmlWed, 17 Jun 2026 02:47:55 +0000HIGH 7.5: The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Path Traversal, allowing attackers to access arbitrary files.CVE-2020-10505: The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of SQLhttps://patchthecve.com/cve/CVE-2020-10505.htmlhttps://patchthecve.com/cve/CVE-2020-10505.htmlWed, 17 Jun 2026 02:47:55 +0000CRITICAL 9.8: The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of SQL Injection, an attacker can use a union based injection query string to get databases schema and username/password.