School ERP Pro 1.0 contains a file disclosure vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the 'document' paramet…

CVE-2020-37088 affects School ERP Pro 1.0, allowing unauthenticated attackers to read arbitrary files through a file disclosure vulnerability. The vulnerability is exploited by manipulating the 'document' parameter in download.php. Attackers can use directory traversal paths to access sensitive configuration files. This enables unauthorized access to system credentials and configuration information. The vulnerability allows complete bypass of authentication controls for file access.