CVE-2024-26503

Description

Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code via upload of crafted file to certbadge.php endpoint.

NVD

Severity: N/A
CVE ID: CVE-2024-26503
CVSS Score: N/A
CVSS Metrics: NVD assessment not yet provided.

Refrence: NVDMITRE

Proof Of Concept

RoboGR00t

Exploit for Open eClass – CVE-2024-26503: Unrestricted File Upload Leads to Remote Code Execution

Refrence: GitHub