Student Information System vulnerabilities

2 known vulnerabilities in Student Information System from Academiaerp. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Academia Student Information System: Path Traversal: '../filedir'

  CVE-2024-53636Apr 26, 2025SerosoftEPSS 1.62%

  An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attackers to execute arbitrary code via ../ in the filePath parameter.

• 9.1 Critical severity

  Student Information System: Improper Access Control

  CVE-2025-25948Mar 3, 2025AcademiaerpEPSS 6.86%

  Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.