TVN ID	TVN-201912004
CVE ID	CVE-2020-10507
CVSS	9.8 (Critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products	School Manage System versions prior to 2020
Description	The School Manage System, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of misconfigured file upload filter. Attackers can upload any format of file to the system.
Solution	Contact ALLE INFORMATION CO., LTD. for vulnerabilities patch.
Credit	Jia-Rong Chen
Public Date	2020-04-15