Advisories · Technology
gunet openeclass.
Every CVE that names gunet openeclass among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Open eClass Insecure Password Reset Token Reuse Enables Account Takeover
- gunet openeclass
- Authentication bypass
- CVSS 6.5 Medium
Open eClass Broken Access Control Allows Students to Add Content to Course Units
- gunet openeclass
- Broken access control
- CVSS 5.0 Medium
Open eClass's Active Sessions Not Invalidated After Password Change Allow Persistent Account Access
- gunet openeclass
- Authentication bypass
- CVSS 6.5 Medium
Open eClass is Vulnerable to CSRF in Teacher-Restricted Endpoints Allows Unauthorized Actions
- gunet openeclass
- Cross-site request forgery (CSRF)
- CVSS 8.7 High
Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) via Student Assignment Upload
- gunet openeclass
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities
- gunet openeclass
- CWE-841
- CVSS 7.5 High
Open eClass Unauthenticated IDOR Allows Access to Arbitrary User Files
- gunet openeclass
- Broken access control
- CVSS 4.7 Medium
Open eClass is Vulnerable to Reflected Cross-Site Scripting (XSS) in Multiple Endpoints
- gunet openeclass
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Open eClass Has File Upload Filter Bypass via ZIP Archive Extraction
- gunet openeclass
- Unrestricted file upload
- CVSS 7.3 High
Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in User Profile Fields
- gunet openeclass
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in Multiple High-Privilege User Fields
- gunet openeclass
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Open eClass Has Broken Access Control in Course Units Module Allows Students to Create Units
- gunet openeclass
- Broken access control
- CVSS 5.3 Medium
Open eClass is Vulnerable to Username Enumeration via Login Response Discrepancies
- gunet openeclass
- CWE-204
- CVSS 8.7 High
GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access
- GUnet OpenEclass
- Broken access control
- CVSS 7.1 High
GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage
- GUnet OpenEclass
- CWE-256
- CVSS 5.3 Medium
GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure
- GUnet OpenEclass
- Information disclosure
- CVSS 8.7 High
GUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypass
- GUnet OpenEclass
- Unrestricted file upload
- CVSS 7.1 High
GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection
- GUnet OpenEclass
- SQL injection
- CVSS 7.3 High
Open eClass has Unrestricted File Upload that Leads to Remote Code Execution (RCE)
- gunet openeclass
- Unrestricted file upload
- CVSS 9.8 CriticalCritical · CVSS 9+
Open eClass Platform allows Arbitrary File Upload in "modules/h5p/save.php"
- gunet openeclass
- Unrestricted file upload