CVE-2025-27585

A stored cross-site scripting XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Print Name parameter at /rest/staffResource/update...

CVE-2025-25951

An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to access sensitive user information...

CVE-2025-27584

CVE-2025-27584 describes a stored XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118. The issue arises when an attacker injects a crafted payload into the First Name/Print Name/User ID parameters handled by the endpoint at /rest/staffResource...

PT-2025-9570

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description A stored cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the User ID...

CVE-2025-27584

A stored cross-site scripting XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the First Name parameter at /rest/staffResource/update...

CVE-2025-27583

Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows create and modify user accounts, including an Administrator account...

Serosoft Solutions Academia Student Information System EagleR 安全漏洞

Serosoft Solutions Academia Student Information System EagleR is a student information system from Serosoft Solutions, India. A security vulnerability exists in Serosoft Solutions Academia Student Information System EagleR v1.0.118, which originates in the /rest/cb/executeBasicSearch component...

CVE-2025-25951

CVE-2025-25951 affects Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118. The vulnerability is an information disclosure in the /rest/cb/executeBasicSearch component, permitting access to sensitive user information. CVSS v3.1 base score 7.5 (NETWORK, HIGH confid...

CVE-2025-27583

CVE-2025-27583 concerns Serosoft Solutions Academia Student Information System EagleR v1.0.118. The issue is incorrect access control in the REST endpoints /rest/staffResource/findAllUsersAcrossOrg (and related /create path) that allows creating and modifying user accounts, including Administrato...

CVE-2025-25948

Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows create and modify user accounts, including an Administrator account...