Skip to content
Gunet Open Eclass Platform vulnerabilities
-
gunet open eclass platform, openeclass +1 more
Open eClass Insecure Password Reset Token Reuse Enables Account Takeover
CVE-2026-24669
7.8 High
-
gunet open eclass platform, openeclass +1 more
Open eClass Broken Access Control Allows Students to Add Content to Course Units
CVE-2026-24668
6.5 Medium
-
gunet open eclass platform, openeclass +1 more
Open eClass's Active Sessions Not Invalidated After Password Change Allow Persistent Account Access
CVE-2026-24667
5.0 Medium
-
gunet open eclass platform, openeclass +1 more
Open eClass is Vulnerable to CSRF in Teacher-Restricted Endpoints Allows Unauthorized Actions
CVE-2026-24666
6.5 Medium
-
gunet open eclass platform, openeclass +1 more
Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) via Student Assignment Upload
CVE-2026-24665
8.7 High
-
gunet open eclass platform, openeclass +1 more
Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities
CVE-2026-24774
4.3 Medium
-
gunet open eclass platform, openeclass +1 more
Open eClass Unauthenticated IDOR Allows Access to Arbitrary User Files
CVE-2026-24773
7.5 High
-
gunet open eclass platform, openeclass +1 more
Open eClass is Vulnerable to Reflected Cross-Site Scripting (XSS) in Multiple Endpoints
CVE-2026-24674
4.7 Medium
-
gunet open eclass platform, openeclass +1 more
Open eClass Has File Upload Filter Bypass via ZIP Archive Extraction
CVE-2026-24673
4.3 Medium
-
gunet open eclass platform, openeclass +1 more
Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in User Profile Fields
CVE-2026-24672
7.3 High
-
gunet open eclass platform, openeclass +1 more
Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in Multiple High-Privilege User Fields
CVE-2026-24671
6.1 Medium
-
gunet open eclass platform, openeclass +1 more
Open eClass Has Broken Access Control in Course Units Module Allows Students to Create Units
CVE-2026-24670
6.5 Medium
-
gunet open eclass platform, openeclass +1 more
Open eClass is Vulnerable to Username Enumeration via Login Response Discrepancies
CVE-2026-24664
5.3 Medium
-
openeclass gunet openeclass, gunet open eclass platform +1 more
GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access
CVE-2020-37116
8.7 High
-
openeclass gunet openeclass, gunet open eclass platform +1 more
GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage
CVE-2020-37115
7.1 High
-
openeclass gunet openeclass, gunet open eclass platform +1 more
GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure
CVE-2020-37114
5.3 Medium
-
openeclass gunet openeclass, gunet open eclass platform +1 more
GUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypass
CVE-2020-37113
8.7 High
-
openeclass gunet openeclass, gunet open eclass platform +1 more
GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection
CVE-2020-37112
7.1 High
-
gunet open eclass platform, openeclass +1 more
Open eClass Platform allows Arbitrary File Upload in "modules/h5p/save.php"
CVE-2024-38530
9.8 Critical
-
openeclass, gunet open eclass platform +1 more
Cross-site scripting (XSS) vulnerability in GUnet OpenEclass E-learning Platform version 3.15 and...
CVE-2024-33253
5.4 Medium
-
openeclass, gunet open eclass platform +1 more
File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary...
CVE-2024-31777
Public exploit
9.8 Critical
-
gunet open eclass platform, openeclass +1 more
Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and...
CVE-2024-26503
Public exploit
9.1 Critical
-
gunet open eclass platform
GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php...
CVE-2021-44266
6.1 Medium
-
gunet open eclass platform
** DISPUTED ** GUnet Open eClass Platform (aka openeclass) through 3.9.2 might allow remote...
CVE-2020-24381
7.5 High