PT-2026-5857 · Openclass+1 · Gunet Open Eclass+1

Emaragkos · Publicado 2026-02-03 · Atualizado 2026-02-12 · CVE-2020-37112

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions GUnet OpenEclass version 1.7.3

Description The software contains multiple SQL injection flaws. Authenticated attackers can manipulate database queries through unvalidated parameters. Attackers can exploit the month parameter in the agenda module and other endpoints to extract sensitive database information using error-based or time-based injection techniques.

Recommendations Apply updates to address the SQL injection flaws in the agenda module and other endpoints.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2020-37112

Produtos afetados

Gunet Open Eclass

Open Eclass Platform

Referências · 7

• 🔥 https://exploit-db.com/exploits/48163 · Exploit
• https://t.me/cveNotify/151857 · Publicação no Telegram
• https://vulncheck.com/advisories/gunet-openeclass-e-learning-platform-month-sql-injection · Nota
• https://osv.dev/vulnerability/CVE-2020-37112 · Aviso do Fabricante
• https://openeclass.org · Nota
• https://download.openeclass.org/files/docs/1.7/CHANGES.txt · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2020-37112 · Nota de Segurança