CyberSecBulletin

Academiaerp vulnerabilities

We track 2 vulnerabilities in Academiaerp products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 26, 2025.

2vulnerabilities
2critical
0high
0exploited
9.4average CVSS score

Latest Academiaerp vulnerabilities

  • 9.8 Critical severity

    Academia Student Information System: Path Traversal: '../filedir'

    CVE-2024-53636SerosoftEPSS 1.62%

    An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attackers to execute arbitrary code via ../ in the filePath parameter.

  • 9.1 Critical severity

    Student Information System: Improper Access Control

    CVE-2025-25948AcademiaerpEPSS 6.86%

    Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.