CVE-2024-31777

The GUnet OpenEclass e-learning platform (versions 3.15 and earlier ) is vulnerable to an unrestricted file upload vulnerability via the certbadge.php endpoint. An authenticated attacker with administrative privileges can exploit this flaw by using the ZIP functionality to upload crafted files, l...

PT-2024-24202 · Unknown · Open Eclass

Name of the Vulnerable Software and Affected Versions: openclass versions 3.15 and earlier Description: The issue allows an attacker to execute arbitrary code via a crafted file to the "certbadge.php" endpoint. This enables the attacker to potentially gain control over the system. Recommendations...