What’s Vulnerable › Products
gunet openeclass vulnerabilities
20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 18 published in the last 12 months.
Check whether your gunet openeclass version is affected
Latest gunet openeclass vulnerabilities
- CVE-2026-24774 — Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities (CVSS 4.3)
- CVE-2026-24773 — Open eClass Unauthenticated IDOR Allows Access to Arbitrary User Files (CVSS 7.5)
- CVE-2026-24674 — Open eClass is Vulnerable to Reflected Cross-Site Scripting (XSS) in Multiple Endpoints (CVSS 6.1)
- CVE-2026-24673 — Open eClass Has File Upload Filter Bypass via ZIP Archive Extraction (CVSS 5.3)
- CVE-2026-24672 — Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in User Profile Fields (CVSS 5.4)
- CVE-2026-24671 — Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in Multiple High-Privilege User Fields (CVSS 4.8)
- CVE-2026-24670 — Open eClass Has Broken Access Control in Course Units Module Allows Students to Create Units (CVSS 6.5)
- CVE-2026-24669 — Open eClass Insecure Password Reset Token Reuse Enables Account Takeover (CVSS 7.8)
- CVE-2026-24668 — Open eClass Broken Access Control Allows Students to Add Content to Course Units (CVSS 6.5)
- CVE-2026-24667 — Open eClass's Active Sessions Not Invalidated After Password Change Allow Persistent Account Access (CVSS 5.0)
- CVE-2026-24666 — Open eClass is Vulnerable to CSRF in Teacher-Restricted Endpoints Allows Unauthorized Actions (CVSS 6.5)
- CVE-2026-24665 — Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) via Student Assignment Upload (CVSS 5.4)
- CVE-2026-24664 — Open eClass is Vulnerable to Username Enumeration via Login Response Discrepancies (CVSS 5.3)
- CVE-2020-37116 — GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access (CVSS 8.8)
- CVE-2020-37115 — GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage (CVSS 4.9)
- CVE-2020-37114 — GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure (CVSS 6.5)
- CVE-2020-37113 — GUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypass (CVSS 8.8)
- CVE-2020-37112 — GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection (CVSS 6.5)
- CVE-2021-44266 — (CVSS 6.1)
- CVE-2020-24381 — (CVSS 7.5)