gunet kayıtları
gunet üreticisine ait 20 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %65
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-284 Improper Access Control3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-613 Insufficient Session Expiration2
- CWE-841 Improper Enforcement of Behavioral Workflow1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
20 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2020-37113İstismar yok | GUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypassgunet · open eclass platform · CWE-434 | Yüksek8,7 | — | %0,9 | 3 Şub 2026 |
34İzleyin | CVE-2020-37116İstismar yok | GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Accessgunet · open eclass platform · CWE-284 | Yüksek8,7 | — | %0,4 | 3 Şub 2026 |
31İzleyin | CVE-2026-24669İstismar yok | Open eClass Insecure Password Reset Token Reuse Enables Account Takeovergunet · open eclass platform · CWE-613 | Yüksek7,8 | — | %0,1 | 3 Şub 2026 |
30İzleyin | CVE-2020-24381İstismar yok | GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments because it doesgunet · open eclass platform · CWE-200 | Yüksek7,5 | — | %1,3 | 19 Ağu 2020 |
30İzleyin | CVE-2026-24773İstismar yok | Open eClass Unauthenticated IDOR Allows Access to Arbitrary User Filesgunet · open eclass platform · CWE-639 | Yüksek7,5 | — | %0,4 | 3 Şub 2026 |
28İzleyin | CVE-2020-37112İstismar yok | GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injectiongunet · open eclass platform · CWE-89 | Yüksek7,1 | — | %0,3 | 3 Şub 2026 |
28İzleyin | CVE-2020-37115İstismar yok | GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storagegunet · open eclass platform · CWE-256 | Yüksek7,1 | — | %0,2 | 3 Şub 2026 |
26İzleyin | CVE-2026-24670İstismar yok | Open eClass Has Broken Access Control in Course Units Module Allows Students to Create Unitsgunet · open eclass platform · CWE-284 | Orta6,5 | — | %0,2 | 3 Şub 2026 |
26İzleyin | CVE-2026-24668İstismar yok | Open eClass Broken Access Control Allows Students to Add Content to Course Unitsgunet · open eclass platform · CWE-284 | Orta6,5 | — | %0,2 | 3 Şub 2026 |
26İzleyin | CVE-2026-24666İstismar yok | Open eClass is Vulnerable to CSRF in Teacher-Restricted Endpoints Allows Unauthorized Actionsgunet · open eclass platform · CWE-352 | Orta6,5 | — | %0,1 | 3 Şub 2026 |
24İzleyin | CVE-2021-44266İstismar yok | GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter.gunet · open eclass platform · CWE-79 | Orta6,1 | — | %1,0 | 11 Haz 2022 |
24İzleyin | CVE-2026-24674İstismar yok | Open eClass is Vulnerable to Reflected Cross-Site Scripting (XSS) in Multiple Endpointsgunet · open eclass platform · CWE-79 | Orta6,1 | — | %0,2 | 3 Şub 2026 |
21İzleyin | CVE-2020-37114İstismar yok | GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosuregunet · open eclass platform · CWE-200 | Orta5,3 | — | %0,3 | 3 Şub 2026 |
21İzleyin | CVE-2026-24664İstismar yok | Open eClass is Vulnerable to Username Enumeration via Login Response Discrepanciesgunet · open eclass platform · CWE-204 | Orta5,3 | — | %0,2 | 3 Şub 2026 |
21İzleyin | CVE-2026-24673İstismar yok | Open eClass Has File Upload Filter Bypass via ZIP Archive Extractiongunet · open eclass platform · CWE-434 | Orta5,3 | — | %0,2 | 3 Şub 2026 |
21İzleyin | CVE-2026-24672İstismar yok | Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in User Profile Fieldsgunet · open eclass platform · CWE-79 | Orta5,4 | — | %0,2 | 3 Şub 2026 |
21İzleyin | CVE-2026-24665İstismar yok | Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) via Student Assignment Uploadgunet · open eclass platform · CWE-79 | Orta5,4 | — | %0,2 | 3 Şub 2026 |
20İzleyin | CVE-2026-24667İstismar yok | Open eClass's Active Sessions Not Invalidated After Password Change Allow Persistent Account Accessgunet · open eclass platform · CWE-613 | Orta5,0 | — | %0,1 | 3 Şub 2026 |
19İzleyin | CVE-2026-24671İstismar yok | Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in Multiple High-Privilege User Fieldsgunet · open eclass platform · CWE-79 | Orta4,8 | — | %0,2 | 3 Şub 2026 |
17İzleyin | CVE-2026-24774İstismar yok | Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activitiesgunet · open eclass platform · CWE-841 | Orta4,3 | — | %0,2 | 3 Şub 2026 |
- CVE-2020-3711334İzleyin
GUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypass
YüksekCVSS 8,7İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2020-3711634İzleyin
GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access
YüksekCVSS 8,7İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2026-2466931İzleyin
Open eClass Insecure Password Reset Token Reuse Enables Account Takeover
YüksekCVSS 7,8İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2020-2438130İzleyin
GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments because it does
YüksekCVSS 7,5İstismar yokEPSS %1gunet · open eclass platform19 Ağu 2020
- CVE-2026-2477330İzleyin
Open eClass Unauthenticated IDOR Allows Access to Arbitrary User Files
YüksekCVSS 7,5İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2020-3711228İzleyin
GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection
YüksekCVSS 7,1İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2020-3711528İzleyin
GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage
YüksekCVSS 7,1İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2026-2467026İzleyin
Open eClass Has Broken Access Control in Course Units Module Allows Students to Create Units
OrtaCVSS 6,5İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2026-2466826İzleyin
Open eClass Broken Access Control Allows Students to Add Content to Course Units
OrtaCVSS 6,5İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2026-2466626İzleyin
Open eClass is Vulnerable to CSRF in Teacher-Restricted Endpoints Allows Unauthorized Actions
OrtaCVSS 6,5İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2021-4426624İzleyin
GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter.
OrtaCVSS 6,1İstismar yokEPSS %1gunet · open eclass platform11 Haz 2022
- CVE-2026-2467424İzleyin
Open eClass is Vulnerable to Reflected Cross-Site Scripting (XSS) in Multiple Endpoints
OrtaCVSS 6,1İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2020-3711421İzleyin
GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure
OrtaCVSS 5,3İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2026-2466421İzleyin
Open eClass is Vulnerable to Username Enumeration via Login Response Discrepancies
OrtaCVSS 5,3İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2026-2467321İzleyin
Open eClass Has File Upload Filter Bypass via ZIP Archive Extraction
OrtaCVSS 5,3İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2026-2467221İzleyin
Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in User Profile Fields
OrtaCVSS 5,4İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2026-2466521İzleyin
Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) via Student Assignment Upload
OrtaCVSS 5,4İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2026-2466720İzleyin
Open eClass's Active Sessions Not Invalidated After Password Change Allow Persistent Account Access
OrtaCVSS 5,0İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2026-2467119İzleyin
Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in Multiple High-Privilege User Fields
OrtaCVSS 4,8İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026
- CVE-2026-2477417İzleyin
Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities
OrtaCVSS 4,3İstismar yokEPSS %0gunet · open eclass platform3 Şub 2026