Academia Student Information System
Approved changes feed: RSS · Atom
cpe:2.3:a:serosoft:academia_student_information_system:eagler-1.0.118:*:*:*:*:*:*:*part: a version: eagler-1.0.118 update: *
| Vendor | Serosoft (430b342b-d4f8-5b01-8b86-49157c1f7a13) |
|---|---|
| Product | Academia Student Information System (e54546b6-517f-5c7a-ba5c-e157e551abb2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-27585 |
vulnerable | 2026-06-08 07:14:55.342235 |
Details available
A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Print Name parameter at /rest/staffResource/update.
Published: 2025-03-03T00:00:00.000Z
Updated: 2025-03-04T16:15:44.844Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27584 |
vulnerable | 2026-06-08 07:14:55.341952 |
Details available
A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the First Name parameter at /rest/staffResource/update.
Published: 2025-03-03T00:00:00.000Z
Updated: 2025-03-04T16:10:01.481Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27583 |
vulnerable | 2026-06-08 07:14:55.341585 |
Details available
Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.
Published: 2025-03-03T00:00:00.000Z
Updated: 2025-03-05T17:01:09.719Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25953 |
vulnerable | 2026-06-08 07:12:51.416599 |
Details available
Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.
Published: 2025-03-03T00:00:00.000Z
Updated: 2025-12-12T15:25:35.706Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25952 |
vulnerable | 2026-06-08 07:12:51.416342 |
Details available
An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information via a crafted API request.
Published: 2025-03-03T00:00:00.000Z
Updated: 2025-12-12T15:24:30.108Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25951 |
vulnerable | 2026-06-08 07:12:51.416050 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25950 |
vulnerable | 2026-06-08 07:12:51.415676 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.