Changelogpatch
https://download.openeclass.org/files/docs/1.7/CHANGES.txt CVE-2020-37116
HIGH
GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access
Record summary
CVE-2020-37116 has a selected CVSS score of 8.7 (high); EIP currently links 1 catalogued exploit.
Description
GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins. Attackers with access to the platform can remotely access phpMyAdmin and, after uploading a shell, view the config.php file to obtain the MySQL password, leading to full database compromise.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 4, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
GUnet OpenEclassBrowse Openeclass / GUnet OpenEclass | CVE List | 1.7.3 (2007) | affected |
Proofs of concept
1Catalogued exploits
ExploitDBGUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL InjectionExploitDB exploitby emaragkosNot analyzed1 file
References
5nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-37116 ExploitDB-48163exploit
https://www.exploit-db.com/exploits/48163 Official Vendor Homepageproduct
https://www.openeclass.org/ VulnCheck Advisory: GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote AccessThird-party advisory
https://www.vulncheck.com/advisories/gunet-openeclass-e-learning-platform-phpmyadmin-remote-access