CVE-2024-53636: Academiaerp Student Information System

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attackers to execute arbitrary code via ../ in the filePath parameter.

Affected products

• Academiaerp Student Information System: version eagler-1.0.118 only

Published 2025-04-26. Last modified 2026-06-17.