Browse CVEs

HIGH 7.5 CVE-2026-24773 The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an Insecure Direct Object Ref… Open Eclass Platform 4.2+ Fix from $1,9502026-02-03 MEDIUM 6.1 CVE-2026-24674 The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Reflected Cross-Site Script… Open Eclass Platform 4.2+ Fix from $1,6002026-02-03 MEDIUM 5.3 CVE-2026-24673 The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a file upload validation bypa… Open Eclass Platform 4.2+ Fix from $1,6002026-02-03 MEDIUM 5.4 CVE-2026-24672 The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Stored Cross-Site Scripting… Open Eclass Platform 4.2+ Fix from $1,6002026-02-03 MEDIUM 6.5 CVE-2026-24670 The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a broken access control vulne… Open Eclass Platform 4.2+ Fix from $1,6002026-02-03 HIGH 7.8 CVE-2026-24669 The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an insecure password reset me… Open Eclass Platform 4.2+ Fix from $1,9502026-02-03 MEDIUM 6.5 CVE-2026-24668 The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a broken access control vulne… Open Eclass Platform 4.2+ Fix from $1,6002026-02-03 MEDIUM 6.5 CVE-2026-24666 The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Cross-Site Request Forgery … Open Eclass Platform 4.2+ Fix from $1,6002026-02-03 MEDIUM 5.4 CVE-2026-24665 The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a stored Cross-Site Scripting… Open Eclass Platform 4.2+ Fix from $1,6002026-02-03 MEDIUM 5.3 CVE-2026-24664 The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a username enumeration vulner… Open Eclass Platform 4.2+ Fix from $1,6002026-02-03 MEDIUM 5.0 CVE-2026-24667 The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, failure to invalidate active … Open Eclass Platform 4.2+ Fix from $1,6002026-02-03 HIGH 8.8 CVE-2020-37116 GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins. Attackers with access to the platform can remotely access… Open Eclass Platform No fix yet Fix from $1,9502026-02-03 HIGH 8.8 CVE-2020-37113 GUnet OpenEclass 1.7.3 allows authenticated users to bypass file extension restrictions when uploading files. By renaming a PHP file to .php3 or .PhP… Open Eclass Platform No fix yet Fix from $1,9502026-02-03 MEDIUM 6.5 CVE-2020-37112 GUnet OpenEclass 1.7.3 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through unva… Open Eclass Platform No fix yet Fix from $1,6002026-02-03 MEDIUM 6.5 CVE-2020-37114 GUnet OpenEclass 1.7.3 allows unauthenticated and authenticated users to access sensitive information, including system information, application vers… Open Eclass Platform No fix yet Fix from $1,6002026-02-03 MEDIUM 6.1 CVE-2021-44266 GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter. Open Eclass Platform 3.12.2+ Fix from $1,6002022-06-11 HIGH 7.5 CVE-2020-24381 GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments because it does not ensu… Open Eclass Platform 3.11+ Fix from $1,9502020-08-19