CVE-2026-2184

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-2184
A vulnerability was detected in Great Developers Certificate Generation System up to 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73. This vulnerability affects unknown code of the file /restructured/csv.php. The manipulation of the argument photo results in os command injection. The attack can be executed remotely. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The code repository of the project has not been active for many years.

7.3 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://github.com/lakshayyverma/CVE-Discovery/blob/main/Certificate2.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.344887 Permissions Required VDB Entry
https://vuldb.com/?id.344887 Third Party Advisory VDB Entry
https://vuldb.com/?submit.749714 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:greatdevelopers:certificate:*:*:*:*:*:*:*:*
History

24 Feb 2026, 14:41

Type Values Removed Values Added
References () https://github.com/lakshayyverma/CVE-Discovery/blob/main/Certificate2.md - () https://github.com/lakshayyverma/CVE-Discovery/blob/main/Certificate2.md - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.344887 - () https://vuldb.com/?ctiid.344887 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.344887 - () https://vuldb.com/?id.344887 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.749714 - () https://vuldb.com/?submit.749714 - Third Party Advisory, VDB Entry
CPE cpe:2.3:a:greatdevelopers:certificate:*:*:*:*:*:*:*:*
Summary
  • (es) Se detectó una vulnerabilidad en el sistema de generación de certificados de Great Developers hasta 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73. Esta vulnerabilidad afecta a código desconocido del archivo /restructured/csv.PHP. La manipulación del argumento photo resulta en inyección de comandos del sistema operativo. El ataque puede ejecutarse de forma remota. Este producto implementa un lanzamiento continuo para la entrega constante, lo que significa que la información de la versión para las versiones afectadas o actualizadas no está disponible. El repositorio de código del proyecto no ha estado activo durante muchos años.
First Time Greatdevelopers certificate
Greatdevelopers

08 Feb 2026, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-08 21:15

Updated : 2026-02-24 14:41

NVD link : CVE-2026-2184

Mitre link : CVE-2026-2184

CVE.ORG link : CVE-2026-2184

JSON object : View

Products Affected

greatdevelopers

  • certificate
CWE
CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')