CVE-2020-37113

HIGH

GUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypass

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2020-37113 has a selected CVSS score of 8.7 (high); EIP currently links 1 catalogued exploit.

Description

GUnet OpenEclass 1.7.3 allows authenticated users to bypass file extension restrictions when uploading files. By renaming a PHP file to .php3 or .PhP, an attacker can upload a web shell and execute arbitrary code on the server. This vulnerability enables remote code execution by bypassing the intended file type checks in the exercise submission feature.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 6, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

GUnet OpenEclass

Browse Openeclass / GUnet OpenEclass
CVE List1.7.3 (2007)affected

Proofs of concept

1

Catalogued exploits

ExploitDBGUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL InjectionExploitDB exploitby emaragkosNot analyzed1 file

linked to 5 vulnerabilities

ExploitDB
PoC details

References

5