open eclass platform vulnerabilities and fixes

Recent CVEs affecting open eclass platform, with upgrade or downgrade steps. 18 tracked.

Also searched as: openeclassplatform.

open eclass platform has 18 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 13. Most recent: 2026-02-03. Highest priority: CVE-2020-37113 (score 51/100).

• CVE-2026-24774 MEDIUM 4.3 UPGRADE The Open eClass platform (formerly known as GUnet eClass) is a complete course management system
• CVE-2026-24773 HIGH 7.5 UPGRADE The Open eClass platform (formerly known as GUnet eClass) is a complete course management system
• CVE-2026-24674 MEDIUM 4.7 UPGRADE The Open eClass platform (formerly known as GUnet eClass) is a complete course management system
• CVE-2026-24673 MEDIUM 4.3 UPGRADE The Open eClass platform (formerly known as GUnet eClass) is a complete course management system
• CVE-2026-24672 HIGH 7.3 UPGRADE The Open eClass platform (formerly known as GUnet eClass) is a complete course management system
• CVE-2026-24671 MEDIUM 6.1 UPGRADE The Open eClass platform (formerly known as GUnet eClass) is a complete course management system
• CVE-2026-24670 MEDIUM 6.5 UPGRADE The Open eClass platform (formerly known as GUnet eClass) is a complete course management system
• CVE-2026-24669 HIGH 7.8 UPGRADE The Open eClass platform (formerly known as GUnet eClass) is a complete course management system
• CVE-2026-24668 MEDIUM 6.5 UPGRADE The Open eClass platform (formerly known as GUnet eClass) is a complete course management system
• CVE-2026-24667 MEDIUM 5.0 UPGRADE The Open eClass platform (formerly known as GUnet eClass) is a complete course management system
• CVE-2026-24666 MEDIUM 6.5 UPGRADE The Open eClass platform (formerly known as GUnet eClass) is a complete course management system
• CVE-2026-24665 HIGH 8.7 UPGRADE The Open eClass platform (formerly known as GUnet eClass) is a complete course management system
• CVE-2026-24664 MEDIUM 5.3 UPGRADE The Open eClass platform (formerly known as GUnet eClass) is a complete course management system
• CVE-2020-37116 HIGH 8.8 DOWNGRADE GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins
• CVE-2020-37115 MEDIUM 6.5 DOWNGRADE GUnet OpenEclass 1.7.3 stores user credentials in plaintext, allowing administrators to view all registered us
• CVE-2020-37114 MEDIUM 4.3 DOWNGRADE GUnet OpenEclass 1.7.3 allows unauthenticated and authenticated users to access sensitive information, includi
• CVE-2020-37113 HIGH 8.8 DOWNGRADE GUnet OpenEclass 1.7.3 allows authenticated users to bypass file extension restrictions when uploading files
• CVE-2020-37112 HIGH 7.1 DOWNGRADE GUnet OpenEclass 1.7.3 contains multiple SQL injection vulnerabilities that allow authenticated attackers to m

FAQ

How do I fix open eclass platform vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is open eclass platform being exploited right now?

None of the tracked open eclass platform CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which open eclass platform CVE should I patch first?

CVE-2020-37113 currently ranks highest (51/100): GUnet OpenEclass 1.7.3 allows authenticated users to bypass file extension restrictions when uploading files.

RSS feed for open eclass platform · ← Back to latest CVEs