PoC Index

CVE-2024-26503

CRITICAL 9.1EPSS 1.1%

Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code via upload of crafted file to certbadge.php endpoint.

CVSS v3.1
9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
1.13% chance of exploitation in the next 30 days, 64th percentile
Published
2024-03-14
Updated
2024-08-28

Proof-of-concept exploits (1)

References

Related