CVE-2024-26503

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-26503
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26503.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-26503
Published
2024-03-14T22:15:22.550Z
Modified
2026-04-10T05:11:35.880396Z
Severity
  • 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code via upload of crafted file to certbadge.php endpoint.

References

Affected packages

Git / github.com/gunet/openeclass

Affected ranges

Type
GIT
Repo
https://github.com/gunet/openeclass
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
aa967aed73ed839ea1c379134ed184f7630fed65
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.15"
        }
    ]
}

Affected versions

Release_3.*
Release_3.0
Release_3.10
Release_3.10.1
Release_3.10.2
Release_3.11
Release_3.11.1
Release_3.11.2
Release_3.12
Release_3.12.1
Release_3.12.2
Release_3.12.3
Release_3.12.4
Release_3.13
Release_3.13.1
Release_3.13.2
Release_3.14
Release_3.14.1
Release_3.15
Release_3.2
Release_3.2.1
Release_3.2.2
Release_3.2.3
Release_3.3
Release_3.3.1
Release_3.3.2
Release_3.4
Release_3.4.1
Release_3.4.2
Release_3.4.3
Release_3.4.4
Release_3.6.1
Release_3.6.2
Release_3.6.3
Release_3.7
Release_3.7.1
Release_3.7.2
Release_3.8
Release_3.8.1
Release_3.8.2
Release_3.8.3
Release_3.8.4
Release_3.9
Release_3.9.1
Release_3.9.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26503.json"