18
CVEs
0
Critical
7
High
0
KEV
17
PoC
7
Unpatched C/H
0.0%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
7
MEDIUM
11
LOW
0
Monthly CVE Trend
Affected Products (4)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2020-37113 | Open Eclass Platform versions up to 1.7.3 is affected by unrestricted upload of file with dangerous type (CVSS 8.8). | HIGH | 8.8 | 0.2% | 64 |
PoC
No patch
|
| CVE-2020-37116 | GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins. Attackers with access to the platform can remotely access phpMyAdmin and, after uploading a shell, view the config.php file to obtain the MySQL password, leading to full database compromise. [CVSS 8.8 HIGH] | HIGH | 8.8 | 0.1% | 64 |
PoC
No patch
|
| CVE-2026-24665 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. [CVSS 8.7 HIGH] | HIGH | 8.7 | 0.0% | 64 |
PoC
No patch
|
| CVE-2026-24669 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. [CVSS 7.8 HIGH] | HIGH | 7.8 | 0.0% | 59 |
PoC
No patch
|
| CVE-2026-24773 | Open Eclass Platform versions up to 4.2 is affected by authorization bypass through user-controlled key (CVSS 7.5). | HIGH | 7.5 | 0.1% | 58 |
PoC
No patch
|
| CVE-2026-24672 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. [CVSS 7.3 HIGH] | HIGH | 7.3 | 0.0% | 57 |
PoC
No patch
|
| CVE-2020-37112 | GUnet OpenEclass 1.7.3 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through unvalidated parameters. [CVSS 7.1 HIGH] | HIGH | 7.1 | 0.1% | 56 |
PoC
No patch
|
| CVE-2020-37115 | GUnet OpenEclass 1.7.3 stores user credentials in plaintext, allowing administrators to view all registered users' usernames and passwords without encryption. This vulnerability exposes sensitive information and increases the risk of credential theft and unauthorized access. [CVSS 6.5 MEDIUM] | MEDIUM | 6.5 | 0.0% | 53 |
PoC
No patch
|
| CVE-2026-24666 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. [CVSS 6.5 MEDIUM] | MEDIUM | 6.5 | 0.0% | 53 |
PoC
No patch
|
| CVE-2026-24668 | Broken access control in Open eClass Platform before version 4.2 allows authenticated students to modify course content that should only be editable by instructors and administrators. Public exploit code exists for this vulnerability, and no patch is currently available for affected deployments. An attacker with valid student credentials can escalate their privileges to alter course materials and potentially disrupt educational content integrity. | MEDIUM | 6.5 | 0.0% | 53 |
PoC
No patch
|
| CVE-2026-24670 | Broken access control in Open eClass Platform versions prior to 4.2 allows authenticated students to create course units, a privilege normally reserved for instructors and administrators. An attacker with valid student credentials can escalate their capabilities within the platform by performing unauthorized administrative actions. Public exploit code exists for this vulnerability, and no patch is currently available. | MEDIUM | 6.5 | 0.0% | 53 |
PoC
No patch
|
| CVE-2026-24671 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. [CVSS 6.1 MEDIUM] | MEDIUM | 6.1 | 0.0% | 51 |
PoC
No patch
|
| CVE-2026-24664 | Open Eclass Platform versions up to 4.2 contains a vulnerability that allows attackers to identify valid user accounts by analyzing differences in the login response beha (CVSS 5.3). | MEDIUM | 5.3 | 0.1% | 47 |
PoC
No patch
|
| CVE-2026-24674 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. [CVSS 4.7 MEDIUM] | MEDIUM | 4.7 | 0.0% | 44 |
PoC
No patch
|
| CVE-2026-24673 | Open Eclass Platform versions up to 4.2 is affected by unrestricted upload of file with dangerous type (CVSS 4.3). | MEDIUM | 4.3 | 0.0% | 42 |
PoC
No patch
|