CVE-2024-53636 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attackers to execute arbitr…
Medium CVSS: 6.4

CVE-2024-53636

An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attackers to execute arbitrary code via ../ in the filePath parameter.
Vendor
Academiaerp
Product
Student Information System
CWE
CWE-24
Yayın Tarihi
2025-04-26 15:15:44
Güncelleme
2026-01-29 17:57:58
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-24 Student Information System MEDIUM Academiaerp 2025

Referanslar

https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-53636 https://github.com/el-viper/cve-research/tree/main/CVEs/CVE-2024-53636 https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-53636