CVE-2024-26503

PoC —

CVSS 3.1

9.1 critical

EPSS

1%p65

Published

Mar 14, 2024 (Mar 14, 2024)

Modified

Jun 17, 2026

Description

Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code via upload of crafted file to certbadge.php endpoint.

Vendors: openeclass
Products: openeclass
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.