agentprime: gunet-openeclassEvery new CVE for gunet-openeclass.https://agentprime.io/CVE-2026-24669: Open eClass Insecure Password Reset Token Reuse Enables Account Takeoverhttps://agentprime.io/advisories/CVE-2026-24669/https://agentprime.io/advisories/CVE-2026-24669/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 17:00:38 GMTCVECVE-2026-24668: Open eClass Broken Access Control Allows Students to Add Content to Course Unitshttps://agentprime.io/advisories/CVE-2026-24668/https://agentprime.io/advisories/CVE-2026-24668/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:59:48 GMTCVECVE-2026-24667: Open eClass's Active Sessions Not Invalidated After Password Change Allow Persistent Account Accesshttps://agentprime.io/advisories/CVE-2026-24667/https://agentprime.io/advisories/CVE-2026-24667/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:59:32 GMTCVECVE-2026-24666: Open eClass is Vulnerable to CSRF in Teacher-Restricted Endpoints Allows Unauthorized Actionshttps://agentprime.io/advisories/CVE-2026-24666/https://agentprime.io/advisories/CVE-2026-24666/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:58:57 GMTCVECVE-2026-24665: Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) via Student Assignment Uploadhttps://agentprime.io/advisories/CVE-2026-24665/https://agentprime.io/advisories/CVE-2026-24665/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:58:28 GMTCVECVE-2026-24774: Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activitieshttps://agentprime.io/advisories/CVE-2026-24774/https://agentprime.io/advisories/CVE-2026-24774/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:58:09 GMTCVECVE-2026-24773: Open eClass Unauthenticated IDOR Allows Access to Arbitrary User Fileshttps://agentprime.io/advisories/CVE-2026-24773/https://agentprime.io/advisories/CVE-2026-24773/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:57:57 GMTCVECVE-2026-24674: Open eClass is Vulnerable to Reflected Cross-Site Scripting (XSS) in Multiple Endpointshttps://agentprime.io/advisories/CVE-2026-24674/https://agentprime.io/advisories/CVE-2026-24674/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:57:07 GMTCVECVE-2026-24673: Open eClass Has File Upload Filter Bypass via ZIP Archive Extractionhttps://agentprime.io/advisories/CVE-2026-24673/https://agentprime.io/advisories/CVE-2026-24673/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:56:59 GMTCVECVE-2026-24672: Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in User Profile Fieldshttps://agentprime.io/advisories/CVE-2026-24672/https://agentprime.io/advisories/CVE-2026-24672/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:56:36 GMTCVECVE-2026-24671: Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in Multiple High-Privilege User Fieldshttps://agentprime.io/advisories/CVE-2026-24671/https://agentprime.io/advisories/CVE-2026-24671/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:56:26 GMTCVECVE-2026-24670: Open eClass Has Broken Access Control in Course Units Module Allows Students to Create Unitshttps://agentprime.io/advisories/CVE-2026-24670/https://agentprime.io/advisories/CVE-2026-24670/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:56:16 GMTCVECVE-2026-24664: Open eClass is Vulnerable to Username Enumeration via Login Response Discrepancieshttps://agentprime.io/advisories/CVE-2026-24664/https://agentprime.io/advisories/CVE-2026-24664/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:56:07 GMTCVECVE-2020-37116: GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Accesshttps://agentprime.io/advisories/CVE-2020-37116/https://agentprime.io/advisories/CVE-2020-37116/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:52:47 GMTCVECVE-2020-37115: GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storagehttps://agentprime.io/advisories/CVE-2020-37115/https://agentprime.io/advisories/CVE-2020-37115/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:52:46 GMTCVECVE-2020-37114: GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosurehttps://agentprime.io/advisories/CVE-2020-37114/https://agentprime.io/advisories/CVE-2020-37114/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:52:46 GMTCVECVE-2020-37113: GUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypasshttps://agentprime.io/advisories/CVE-2020-37113/https://agentprime.io/advisories/CVE-2020-37113/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:52:45 GMTCVECVE-2020-37112: GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injectionhttps://agentprime.io/advisories/CVE-2020-37112/https://agentprime.io/advisories/CVE-2020-37112/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 16:52:45 GMTCVECVE-2026-22241: Open eClass has Unrestricted File Upload that Leads to Remote Code Execution (RCE)https://agentprime.io/advisories/CVE-2026-22241/https://agentprime.io/advisories/CVE-2026-22241/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Jan 2026 15:07:02 GMTCVECVE-2024-38530: Open eClass Platform allows Arbitrary File Upload in "modules/h5p/save.php"https://agentprime.io/advisories/CVE-2024-38530/https://agentprime.io/advisories/CVE-2024-38530/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Aug 2024 14:50:32 GMTCVEcritical