Skip to content
OpenAdvisories

Vendor

Openeclass

5 known vulnerabilities.

Openeclass at a glance

Last 12 months
5
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 5 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202650
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

GUnet OpenEclass 5
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 8.8
    CVE-2020-37116

    GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access

    GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins. Attackers with access to the platform can remotely access phpMyAdmin and, after uploading a shell, view the config.php file to obtain the MySQL password, leading to fu…

    Openeclass GUnet OpenEclass
  • Medium 4.3
    CVE-2020-37114

    GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure

    GUnet OpenEclass 1.7.3 allows unauthenticated and authenticated users to access sensitive information, including system information, application version, and other students' uploaded assessments, due to improper access controls and information disclosure flaw…

    Openeclass GUnet OpenEclass
  • Medium 6.5
    CVE-2020-37115

    GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage

    GUnet OpenEclass 1.7.3 stores user credentials in plaintext, allowing administrators to view all registered users' usernames and passwords without encryption. This vulnerability exposes sensitive information and increases the risk of credential theft and unau…

    Openeclass GUnet OpenEclass
  • High 8.8
    CVE-2020-37113

    GUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypass

    GUnet OpenEclass 1.7.3 allows authenticated users to bypass file extension restrictions when uploading files. By renaming a PHP file to .php3 or .PhP, an attacker can upload a web shell and execute arbitrary code on the server. This vulnerability enables remo…

    Openeclass GUnet OpenEclass
  • High 7.1
    CVE-2020-37112

    GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection

    GUnet OpenEclass 1.7.3 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through unvalidated parameters. Attackers can exploit the 'month' parameter in the agenda module and other endpoints to ex…

    Openeclass GUnet OpenEclass