Openeclass
Approved changes feed: RSS · Atom
cpe:2.3:a:openeclass:openeclass:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Openeclass (c4959e44-23cf-519f-8a41-63cf4a55fdca) |
|---|---|
| Product | Openeclass (658ae1c5-131a-59cf-b338-0c257f6be638) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/gunet/openeclass |
purl2cpe | 2026-06-01 10:11:47.393679 |
pkg:github/maellak/openeclass |
purl2cpe | 2026-06-01 10:11:47.393683 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-22241 |
vulnerable | 2026-06-08 07:49:17.766200 |
Open eClass has Unrestricted File Upload that Leads to Remote Code Execution (RCE)
The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an arbitrary file upload vulnerability in the theme import functionality enables an attacker with administrative privileges to upload arbitrary files on the server's file system. The main cause of the issue is that no validation or sanitization of the file's present inside the zip archive. This leads to remote code execution on the web server. Version 4.2 patches the issue.
Published: 2026-01-08T15:07:02.350Z
Updated: 2026-01-23T18:18:44.253Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-65734 |
vulnerable | 2026-06-08 07:39:20.963719 |
Details available
An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute arbitrary code via uploading a crafted SVG file.
Published: 2026-03-16T00:00:00.000Z
Updated: 2026-03-16T17:24:36.260Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38530 |
vulnerable | 2026-06-08 06:41:47.640296 |
Open eClass Platform allows Arbitrary File Upload in "modules/h5p/save.php"
CRITICAL (9.8)
The Open eClass platform (formerly known as GUnet eClass) is a complete Course Management System. An arbitrary file upload vulnerability in the "save" functionality of the H5P module enables unauthenticated users to upload arbitrary files on the server's filesystem. This may lead in unrestricted RCE on the backend server, since the upload location is accessible from the internet. This vulnerability is fixed in 3.16.
Published: 2024-08-12T14:50:32.285Z
Updated: 2024-08-12T15:30:52.981Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33253 |
vulnerable | 2026-06-08 06:37:30.964116 |
Details available
Cross-site scripting (XSS) vulnerability in GUnet OpenEclass E-learning Platform version 3.15 and before allows a authenticated privileged attacker to execute arbitrary code via the title and description fields of the badge template editing function.
Published: 2024-06-13T00:00:00.000Z
Updated: 2024-08-02T02:27:53.649Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31777 |
vulnerable | 2026-06-08 06:35:32.096926 |
Details available
File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a crafted file to the certbadge.php endpoint.
Published: 2024-06-13T00:00:00.000Z
Updated: 2024-09-06T16:39:13.746Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26503 |
vulnerable | 2026-06-08 06:31:26.462715 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33116 |
vulnerable | 2026-06-08 05:44:46.234115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7389 |
vulnerable | 2026-06-08 05:09:55.825382 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.