Vulnerability index

Browse CVEs

17 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Open Eclass Platform HIGH 7.5
CVE-2026-24773

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an Insecure Direct Object Ref…

Fix: 4.2+
Fix from $1,950 2026-02-03
Open Eclass Platform MEDIUM 6.1
CVE-2026-24674

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Reflected Cross-Site Script…

Fix: 4.2+
Fix from $1,600 2026-02-03
Open Eclass Platform MEDIUM 5.3
CVE-2026-24673

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a file upload validation bypa…

Fix: 4.2+
Fix from $1,600 2026-02-03
Open Eclass Platform MEDIUM 5.4
CVE-2026-24672

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Stored Cross-Site Scripting…

Fix: 4.2+
Fix from $1,600 2026-02-03
Open Eclass Platform MEDIUM 6.5
CVE-2026-24670

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a broken access control vulne…

Fix: 4.2+
Fix from $1,600 2026-02-03
Open Eclass Platform HIGH 7.8
CVE-2026-24669

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an insecure password reset me…

Fix: 4.2+
Fix from $1,950 2026-02-03
Open Eclass Platform MEDIUM 6.5
CVE-2026-24668

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a broken access control vulne…

Fix: 4.2+
Fix from $1,600 2026-02-03
Open Eclass Platform MEDIUM 6.5
CVE-2026-24666

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Cross-Site Request Forgery …

Fix: 4.2+
Fix from $1,600 2026-02-03
Open Eclass Platform MEDIUM 5.4
CVE-2026-24665

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a stored Cross-Site Scripting…

Fix: 4.2+
Fix from $1,600 2026-02-03
Open Eclass Platform MEDIUM 5.3
CVE-2026-24664

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a username enumeration vulner…

Fix: 4.2+
Fix from $1,600 2026-02-03
Open Eclass Platform MEDIUM 5.0
CVE-2026-24667

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, failure to invalidate active …

Fix: 4.2+
Fix from $1,600 2026-02-03
Open Eclass Platform HIGH 8.8
CVE-2020-37116

GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins. Attackers with access to the platform can remotely access…

No fix yet
Fix from $1,950 2026-02-03
Open Eclass Platform HIGH 8.8
CVE-2020-37113

GUnet OpenEclass 1.7.3 allows authenticated users to bypass file extension restrictions when uploading files. By renaming a PHP file to .php3 or .PhP…

No fix yet
Fix from $1,950 2026-02-03
Open Eclass Platform MEDIUM 6.5
CVE-2020-37112

GUnet OpenEclass 1.7.3 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through unva…

No fix yet
Fix from $1,600 2026-02-03
Open Eclass Platform MEDIUM 6.5
CVE-2020-37114

GUnet OpenEclass 1.7.3 allows unauthenticated and authenticated users to access sensitive information, including system information, application vers…

No fix yet
Fix from $1,600 2026-02-03
Open Eclass Platform MEDIUM 6.1
CVE-2021-44266

GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter.

Fix: 3.12.2+
Fix from $1,600 2022-06-11
Open Eclass Platform HIGH 7.5
CVE-2020-24381

GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments because it does not ensu…

Fix: 3.11+
Fix from $1,950 2020-08-19