CVE-2026-24774

< 4.2

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a business

4.3MEDIUM

CVE-2026-24773

< 4.2

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an Insecur

7.5HIGH

CVE-2026-24674

< 4.2

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Reflecte

4.7MEDIUM

CVE-2026-24673

< 4.2

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a file upl

4.3MEDIUM

CVE-2026-24672

< 4.2

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Stored C

7.3HIGH

CVE-2026-24671

< 4.2

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Stored C

6.1MEDIUM

CVE-2026-24670

< 4.2

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a broken a

6.5MEDIUM

CVE-2026-24669

< 4.2

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an insecur

7.8HIGH

CVE-2026-24668

< 4.2

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a broken a

6.5MEDIUM

CVE-2026-24667

< 4.2

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, failure to

5.0MEDIUM

CVE-2026-24666

< 4.2

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Cross-Si

6.5MEDIUM

CVE-2026-24665

< 4.2

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a stored C

8.7HIGH

CVE-2026-24664

< 4.2

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a username

5.3MEDIUM

CVE-2020-37116

all versions

GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins. Attackers with access to the platform

8.8HIGH

CVE-2020-37115

all versions

GUnet OpenEclass 1.7.3 stores user credentials in plaintext, allowing administrators to view all registered users' usernames and p

6.5MEDIUM

CVE-2020-37114

all versions

GUnet OpenEclass 1.7.3 allows unauthenticated and authenticated users to access sensitive information, including system informatio

4.3MEDIUM

CVE-2020-37113

all versions

GUnet OpenEclass 1.7.3 allows authenticated users to bypass file extension restrictions when uploading files. By renaming a PHP fi

8.8HIGH

CVE-2020-37112

all versions

GUnet OpenEclass 1.7.3 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate database q

7.1HIGH

CVE-2021-44266

< 3.12.2

GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter.

6.1MEDIUM

CVE-2020-24381

< 3.11

GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments becau

7.5HIGH