Lucene search
+L

40 matches found

CNNVD
CNNVD
added 2025/03/03 12:00 a.m.9 views

Serosoft Solutions Academia Student Information System EagleR 安全漏洞

Serosoft Solutions Academia Student Information System EagleR is a student information system from Serosoft Solutions, India. A security vulnerability exists in Serosoft Solutions Academia Student Information System EagleR v1.0.118, which stems from improper access control in the...

8.1CVSS6.5AI score0.00357EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/03/03 12:00 a.m.11 views

PT-2025-9240

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description The issue is related to incorrect access control in the component "/rest/staffResource/update" of the affected software, allowing unauthorize...

8.1CVSS6.5AI score0.00357EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2025/03/03 12:00 a.m.19 views

PT-2025-9241

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description An information disclosure issue in the /rest/cb/executeBasicSearch component allows attackers to access sensitive user information...

7.5CVSS6AI score0.00435EPSS
SaveExploits0References10
CVE
CVE
added 2025/03/03 12:00 a.m.136 views

CVE-2025-25953

CVE-2025-25953 affects Serosoft Solutions Pvt Ltd Academia Student Information System EagleR v1.0.118. The connected sources describe an Azure JWT access token exposure in EagleR, enabling authenticated attackers to escalate privileges and access sensitive information. The base CVSS v3.1 vector i...

6.5CVSS6.9AI score0.00386EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.11 views

Serosoft Solutions Academia Student Information System EagleR 跨站脚本漏洞

Serosoft Solutions Academia Student Information System EagleR is a student information system from Serosoft Solutions, India. A security vulnerability exists in Serosoft Solutions Academia Student Information System EagleR v1.0.118, which stems from a stored cross-site scripting vulnerability in...

5.4CVSS5.9AI score0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/03/03 12:00 a.m.12 views

PT-2025-9587

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description The issue is related to an Insecure Direct Object References IDOR in the component "/getStudemtAllDetailsById?studentId=XX". This allows...

6.4AI score
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.11 views

Serosoft Solutions Academia Student Information System EagleR 安全漏洞

Serosoft Solutions Academia Student Information System EagleR is a student information system from Serosoft Solutions, India. A security vulnerability exists in Serosoft Solutions Academia Student Information System EagleR v1.0.118, which stems from improper access control in the...

9.1CVSS6.2AI score0.06862EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/03/03 12:00 a.m.14 views

PT-2025-9586

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description An information disclosure issue in the /rest/cb/executeBasicSearch component allows attackers to access sensitive user information...

6AI score
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.11 views

Serosoft Solutions Academia Student Information System EagleR 安全漏洞

Serosoft Solutions Academia Student Information System EagleR is a student information system from Serosoft Solutions, India. A security vulnerability exists in Serosoft Solutions Academia Student Information System EagleR v1.0.118, which stems from improper access control and allows the creation...

9.1CVSS6.2AI score0.00347EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/03 12:00 a.m.39 views

CVE-2025-25951

An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to access sensitive user information...

0.00435EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/03/03 12:00 a.m.17 views

PT-2025-9243

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description The issue concerns an Azure JWT access token exposure, allowing authenticated attackers to escalate privileges and access sensitive...

6.5CVSS6.7AI score0.00386EPSS
SaveExploits0References13
Cvelist
Cvelist
added 2025/03/03 12:00 a.m.24 views

CVE-2025-25949

A stored cross-site scripting XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the User ID parameter at /rest/staffResource/update...

0.00324EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.11 views

Serosoft Solutions Academia Student Information System EagleR 安全漏洞

Serosoft Solutions Academia Student Information System EagleR is a student information system from Serosoft Solutions, India. A security vulnerability exists in Serosoft Solutions Academia Student Information System EagleR v1.0.118, which stems from Azure JWT access token exposure, and could lead...

6.5CVSS6.4AI score0.00386EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/03/03 12:00 a.m.13 views

PT-2025-9569

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description The issue is related to incorrect access control in the component /rest/staffResource/create, allowing unauthorized creation and modification...

6.6AI score
SaveExploits0References5
Cvelist
Cvelist
added 2025/03/03 12:00 a.m.22 views

CVE-2025-27584

A stored cross-site scripting XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the First Name parameter at /rest/staffResource/update...

0.00214EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/03 12:00 a.m.70 views

CVE-2025-27584

CVE-2025-27584 describes a stored XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118. The issue arises when an attacker injects a crafted payload into the First Name/Print Name/User ID parameters handled by the endpoint at /rest/staffResource...

5.4CVSS5.6AI score0.00214EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.31 views

Serosoft Solutions Academia Student Information System EagleR 跨站脚本漏洞

Serosoft Solutions Academia Student Information System EagleR is a student information system from Serosoft Solutions, India. A security vulnerability exists in Serosoft Solutions Academia Student Information System EagleR v1.0.118, which stems from a stored cross-site scripting vulnerability in...

5.4CVSS5.9AI score0.00214EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.12 views

Serosoft Solutions Academia Student Information System EagleR 安全漏洞

Serosoft Solutions Academia Student Information System EagleR is a student information system from Serosoft Solutions, India. A security vulnerability exists in Serosoft Solutions Academia Student Information System EagleR v1.0.118, which stems from an insecure direct object reference in the...

6.5CVSS6.3AI score0.00357EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.16 views

Serosoft Solutions Academia Student Information System EagleR 安全漏洞

Serosoft Solutions Academia Student Information System EagleR is a student information system from Serosoft Solutions, India. A security vulnerability exists in Serosoft Solutions Academia Student Information System EagleR v1.0.118, which originates in the /rest/cb/executeBasicSearch component...

7.5CVSS6.3AI score0.00435EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/03/03 12:00 a.m.8 views

CVE-2025-25951

An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to access sensitive user information...

6.5AI score0.00435EPSS
SaveExploits0References3
Rows per page
Query Builder