İçeriğe atla
Noroxi

gunet kayıtları

gunet üreticisine ait 20 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%65
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Tüm kayıtlar

20 kayıt
  • CVE-2020-37113
    34İzleyin

    GUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypass

    YüksekCVSS 8,7İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2020-37116
    34İzleyin

    GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access

    YüksekCVSS 8,7İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2026-24669
    31İzleyin

    Open eClass Insecure Password Reset Token Reuse Enables Account Takeover

    YüksekCVSS 7,8İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2020-24381
    30İzleyin

    GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments because it does

    YüksekCVSS 7,5İstismar yokEPSS %1

    gunet · open eclass platform19 Ağu 2020

  • CVE-2026-24773
    30İzleyin

    Open eClass Unauthenticated IDOR Allows Access to Arbitrary User Files

    YüksekCVSS 7,5İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2020-37112
    28İzleyin

    GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection

    YüksekCVSS 7,1İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2020-37115
    28İzleyin

    GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage

    YüksekCVSS 7,1İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2026-24670
    26İzleyin

    Open eClass Has Broken Access Control in Course Units Module Allows Students to Create Units

    OrtaCVSS 6,5İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2026-24668
    26İzleyin

    Open eClass Broken Access Control Allows Students to Add Content to Course Units

    OrtaCVSS 6,5İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2026-24666
    26İzleyin

    Open eClass is Vulnerable to CSRF in Teacher-Restricted Endpoints Allows Unauthorized Actions

    OrtaCVSS 6,5İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2021-44266
    24İzleyin

    GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter.

    OrtaCVSS 6,1İstismar yokEPSS %1

    gunet · open eclass platform11 Haz 2022

  • CVE-2026-24674
    24İzleyin

    Open eClass is Vulnerable to Reflected Cross-Site Scripting (XSS) in Multiple Endpoints

    OrtaCVSS 6,1İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2020-37114
    21İzleyin

    GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure

    OrtaCVSS 5,3İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2026-24664
    21İzleyin

    Open eClass is Vulnerable to Username Enumeration via Login Response Discrepancies

    OrtaCVSS 5,3İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2026-24673
    21İzleyin

    Open eClass Has File Upload Filter Bypass via ZIP Archive Extraction

    OrtaCVSS 5,3İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2026-24672
    21İzleyin

    Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in User Profile Fields

    OrtaCVSS 5,4İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2026-24665
    21İzleyin

    Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) via Student Assignment Upload

    OrtaCVSS 5,4İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2026-24667
    20İzleyin

    Open eClass's Active Sessions Not Invalidated After Password Change Allow Persistent Account Access

    OrtaCVSS 5,0İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2026-24671
    19İzleyin

    Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in Multiple High-Privilege User Fields

    OrtaCVSS 4,8İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026

  • CVE-2026-24774
    17İzleyin

    Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities

    OrtaCVSS 4,3İstismar yokEPSS %0

    gunet · open eclass platform3 Şub 2026