PT-2026-5861 · Openclass+1 · Gunet Open Eclass+1

Emaragkos · Published 2026-02-03 · Updated 2026-02-03 · CVE-2020-37116

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GUnet OpenEclass version 1.7.3

Description The software includes phpMyAdmin 2.10.0.2 by default, which permits remote logins. Attackers with platform access can remotely access phpMyAdmin and upload a shell to view the config.php file. This allows the retrieval of the MySQL password, potentially leading to a full database compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2020-37116

Affected Products

Gunet Open Eclass

Open Eclass Platform

References · 6

• 🔥 https://exploit-db.com/exploits/48163 · Exploit
• https://osv.dev/vulnerability/CVE-2020-37116 · Vendor Advisory
• https://download.openeclass.org/files/docs/1.7/CHANGES.txt · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-37116 · Security Note
• https://vulncheck.com/advisories/gunet-openeclass-e-learning-platform-phpmyadmin-remote-access · Note
• https://openeclass.org · Note