CVE-2026-2184

HIGH

Great Developers Certificate Generation System - OS Command Injection

Title source: llm
STIX 2.1

Description

A vulnerability was detected in Great Developers Certificate Generation System up to 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73. This vulnerability affects unknown code of the file /restructured/csv.php. The manipulation of the argument photo results in os command injection. The attack can be executed remotely. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The code repository of the project has not been active for many years.

References (4)

Core 4
Core References
Permissions Required, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.344887
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.344887
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.749714

Scores

CVSS v3 7.3
EPSS 0.0006
EPSS Percentile 19.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-78 CWE-77
Status published
Products (1)
greatdevelopers/certificate < 2017-10-16
Published Feb 08, 2026
Tracked Since Feb 18, 2026