PT-2026-5857 · Openclass+1 · Gunet Open Eclass+1

Emaragkos · Published 2026-02-03 · Updated 2026-02-12 · CVE-2020-37112

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions GUnet OpenEclass version 1.7.3

Description The software contains multiple SQL injection flaws. Authenticated attackers can manipulate database queries through unvalidated parameters. Attackers can exploit the month parameter in the agenda module and other endpoints to extract sensitive database information using error-based or time-based injection techniques.

Recommendations Apply updates to address the SQL injection flaws in the agenda module and other endpoints.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2020-37112

Affected Products

Gunet Open Eclass

Open Eclass Platform

References · 7

• 🔥 https://exploit-db.com/exploits/48163 · Exploit
• https://osv.dev/vulnerability/CVE-2020-37112 · Vendor Advisory
• https://download.openeclass.org/files/docs/1.7/CHANGES.txt · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-37112 · Security Note
• https://t.me/cveNotify/151857 · Telegram Post
• https://vulncheck.com/advisories/gunet-openeclass-e-learning-platform-month-sql-injection · Note
• https://openeclass.org · Note