Serosoft vulnerabilities
We track 4 vulnerabilities in Serosoft products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on April 26, 2025.
Latest Serosoft vulnerabilities
- 9.8 Critical severity
Academia Student Information System: Path Traversal: '../filedir'
An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attackers to execute arbitrary code via ../ in the filePath parameter.
- 9.1 Critical severity
Academia Student Information System: Missing Authorization
Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.
- 7.5 High severity
Academia Student Information System: Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information.
- 8.1 High severity
Academia Student Information System: Improper Access Control
Incorrect access control in the component /rest/staffResource/update of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.