CVE-2024-53636

CVE-2024-53636 affects Serosoft Academia Student Information System (SIS) EagleR 1.0.118. A file upload flaw via writefile.php allows arbitrary code execution through path traversal in the filePath parameter ("../"), enabling remote compromise with network access and no user interaction as per th...

CVE-2025-25948

CVE-2025-25948 affects Serosoft Solutions Pvt Ltd Academia Student Information System EagleR v1.0.118. The vulnerability is due to incorrect access control in the REST endpoint /rest/staffResource/create, enabling an attacker to create and modify user accounts, including an Administrator account....

CVE-2025-25949

CVE-2025-25949 affects the Serosoft Solutions Academia Student Information System (SIS) EagleR, v1.0.118. The vulnerability is a stored cross-site scripting (XSS) flaw in the web interface, reported to occur via unsanitized input in the User ID parameter (noted also as related fields in variants ...