CVE-2020-37116: Gunet Open Eclass Platform

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins. Attackers with access to the platform can remotely access phpMyAdmin and, after uploading a shell, view the config.php file to obtain the MySQL password, leading to full database compromise.

Affected products

• Gunet Open Eclass Platform: version 1.7.3 only

Published 2026-02-03. Last modified 2026-06-17.