https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-53636.htmlhttps://patchthecve.com/cve/CVE-2024-53636.htmlWed, 17 Jun 2026 08:09:03 +0000MEDIUM 6.4: An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attackers to execute arbitrary code via ../ in the filePath parameter.https://patchthecve.com/cve/CVE-2025-25949.htmlhttps://patchthecve.com/cve/CVE-2025-25949.htmlWed, 17 Jun 2026 09:01:20 +0000MEDIUM 5.4: A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the User ID parameter at /rest/staffResource/update.https://patchthecve.com/cve/CVE-2025-25948.htmlhttps://patchthecve.com/cve/CVE-2025-25948.htmlWed, 17 Jun 2026 09:01:20 +0000CRITICAL 9.1: Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.