Vulnerability · Published Feb 8, 2026 · Assigned by VulDB
CVE-2026-2184Great Developers Certificate Generation System csv.php os command injection
High 7.3
In plain English
A high-severity OS command injection in Certificate Generation System from Great Developers. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 10.5% (higher than 96% of all known vulnerabilities).
Official description
A vulnerability was detected in Great Developers Certificate Generation System up to 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73. This vulnerability affects unknown code of the file /restructured/csv.php. The manipulation of the argument photo results in os command injection. The attack can be executed remotely. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The code repository of the project has not been active for many years.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Great Developers | Certificate Generation System | 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73 |
Weakness: CWE-78, CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R
References
- VDB-344887 | Great Developers Certificate Generation System csv.php os command injection vdb-entry, technical-description
- VDB-344887 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #749714 | Great Developers Certificate Generator System 1.0 Improper Neutralization of Special Elements third-party-advisory
- https://github.com/lakshayyverma/CVE-Discovery/blob/main/Certificate2.md related