CVE-2024-54918

CVE-2024-54918 is a critical Remote Code Execution vulnerability affecting Kashipara E-learning Management System v1.0, specifically through an insecure file upload mechanism in the /teacher_avatar.php component. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity and no user interaction, allowing an unauthenticated attacker to achieve full compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the high severity and ease of exploitation warrant immediate attention despite minimal community discussion or media coverage.