Openeclass

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Openeclass records in CISA KEV

No Openeclass vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Openeclass 8 records HIGH

Records

8 records in Openeclass · all components

TI-2024-25765 CVE-2024-38530

Open eClass Platform allows Arbitrary File Upload in "modules/h5p/save.php"

HIGH 82

The Open eClass platform (formerly known as GUnet eClass) is a complete Course Management System.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00776 Published 2024-08-12 No fix listed CWE-434

TI-2024-20927 CVE-2024-31777 · GHSA-2jw4-8qc2-wm33

File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute…

HIGH 76

File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a crafted file to the certbadge.php endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03821 Published 2024-06-13 No fix listed CWE-434

TI-2024-17447 CVE-2024-26503 · GHSA-gj96-4654-x98q

Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15…

HIGH 74

Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code via upload of crafted file to certbadge.php endpoint.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02961 Published 2024-03-14 No fix listed CWE-434

TI-2026-17851 CVE-2026-22241

Open eClass has Unrestricted File Upload that Leads to Remote Code Execution (RCE)

HIGH 67

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system.

CVSS 4.0HIGH 7.3 Network High privileges No interaction EPSS 0.03262 Published 2026-01-08 Fixed in 4.2 CWE-434

TI-2025-40431 CVE-2025-65734 · GHSA-cxx6-4q6w-wp3r

An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments…

MEDIUM 58

An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute arbitrary code via uploading a crafted SVG file.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00257 Published 2026-03-16 No fix listed CWE-79

TI-2022-14570 CVE-2022-33116 · GHSA-m456-26w4-fmr9

An issue in the jmpath variable in /modules/mindmap/index.php of GUnet Open eClass…

LOW 32

An issue in the jmpath variable in /modules/mindmap/index.php of GUnet Open eClass Platform (aka openeclass) v3.12.4 and below allows attackers to read arbitrary files via a directory traversal.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01766 Published 2022-06-27 No fix listed CWE-22

TI-2024-21985 CVE-2024-33253 · GHSA-g2cx-52qh-37rp

Cross-site scripting (XSS) vulnerability in GUnet OpenEclass E-learning Platform version…

LOW 29

Cross-site scripting (XSS) vulnerability in GUnet OpenEclass E-learning Platform version 3.15 and before allows a authenticated privileged attacker to execute arbitrary code via the title and description fields of the ba…

CVSS 3.1MEDIUM 6.0 Network High privileges No interaction EPSS 0.00411 Published 2024-06-13 No fix listed CWE-79

TI-2017-05043 CVE-2017-7389 · GHSA-xxqw-w7gr-7fqf

Multiple Cross-Site Scripting (XSS) were discovered in 'openeclass Release_3.5.4'.

LOW 29

Multiple Cross-Site Scripting (XSS) were discovered in 'openeclass Release_3.5.4'.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00838 Published 2017-04-01 No fix listed CWE-79

Open these records in search →

Critical	3
High	5
Medium	5
Low	0
No CVSS	0