Lucene search
K

9 matches found

OSV
OSV
added 2025/03/03 1:15 a.m.1 views

CVE-2025-27584

A stored cross-site scripting XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the First Name parameter at /rest/staffResource/update...

5.4CVSS5.9AI score0.00105EPSS
Exploits0References1
OSV
OSV
added 2025/03/03 1:15 a.m.2 views

CVE-2025-25949

A stored cross-site scripting XSS vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the User ID parameter at /rest/staffResource/update...

5.4CVSS5.9AI score0.00175EPSS
Exploits1References3
OSV
OSV
added 2025/03/03 1:15 a.m.3 views

CVE-2025-25948

Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows create and modify user accounts, including an Administrator account...

9.1CVSS5.7AI score0.03208EPSS
Exploits1References3
OSV
OSV
added 2025/03/03 1:15 a.m.3 views

CVE-2025-25950

Incorrect access control in the component /rest/staffResource/update of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows create and modify user accounts, including an Administrator account...

8.1CVSS5.7AI score0.00126EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/03/03 12:0 a.m.3 views

PT-2025-9240

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description The issue is related to incorrect access control in the component "/rest/staffResource/update" of the affected software, allowing unauthorize...

8.1CVSS6.5AI score0.00126EPSS
Exploits0References11
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.2 views

Serosoft Solutions Academia Student Information System EagleR 安全漏洞

Serosoft Solutions Academia Student Information System EagleR is a student information system from Serosoft Solutions, India. A security vulnerability exists in Serosoft Solutions Academia Student Information System EagleR v1.0.118, which stems from improper access control in the...

9.1CVSS6.2AI score0.03208EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/03/03 12:0 a.m.3 views

PT-2025-9238

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description The issue concerns incorrect access control in the /rest/staffResource/create component, allowing the creation and modification of user...

9.1CVSS6.5AI score0.03208EPSS
Exploits1References13
Positive Technologies
Positive Technologies
added 2025/03/03 12:0 a.m.4 views

PT-2025-9571

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description The issue is related to incorrect access control in the /rest/staffResource/update component, allowing unauthorized creation and modification...

6.5AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/03/03 12:0 a.m.2 views

PT-2025-9569

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description The issue is related to incorrect access control in the component /rest/staffResource/create, allowing unauthorized creation and modification...

6.6AI score
Exploits0References5
Rows per page
Query Builder