PT-2024-24202 · Unknown · Open Eclass

Name of the Vulnerable Software and Affected Versions: openclass versions 3.15 and earlier Description: The issue allows an attacker to execute arbitrary code via a crafted file to the "certbadge.php" endpoint. This enables the attacker to potentially gain control over the system. Recommendations...

CVE-2024-31777

CVE-2024-31777 is a file-upload vulnerability in OpenEclass (GUnet OpenEclass E-learning) affecting version 3.15 and earlier. The issue allows an attacker to execute arbitrary code by uploading a crafted file to the certbadge.php endpoint, enabling remote code execution with the ability to write/...