CVE-2026-22241

🚨 CVE-2026-22241 - Open eClass Theme Import Remote Code Execution 📌 Vulnerability Summary Open eClass also known as GUnet eClass, a widely used open-source Learning Management System LMS, contains a critical Unrestricted File Upload vulnerability in its Theme Import feature. An authenticated...

Exploit-CVE-2024-26503

Open eClass RCE Exploit Tool This tool is designed to exploit a known vulnerability CVE-2024-26503 in Open eClass platforms, allowing for remote code execution RCE through an unrestricted file upload flaw. The vulnerability allows attackers to upload a web shell to the server, enabling the...

CVE-2026-22241

CVE-2026-22241 : Open eClass Remote Code Execution RCE This exploit uses CVE-2026-22241 automates the login, ZIP creation, upload process and providing webshell directly on the server and removes it automatically once the exploit is completed. Description An Unrestricted File Upload vulnerability...

Open eClass RCE (CVE-2024-26503) Detection

Detects GUnet Open eClass 3.15 instances potentially vulnerable to CVE-2024-26503 unrestricted badge icon upload leading to RCE. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.http.httpclient import Httpclient from bs4 import BeautifulSoup import re class...

Open eClass 3.15 - Remote Code Execution (CVE-2024-26503)

CVE-2024-26503: authenticated unrestricted file upload in /modules/admin/certbadge.php stores a PHP webshell under /courses/userprogressdata/badgetemplates/. !/usr/bin/env python3 -- coding: utf-8 -- """Open eClass CVE-2024-26503 authenticated certbadge icon upload RCE.""" from future import...

Open eClass 3.15 Shell Upload

Open eClass version 3.15 contains an unrestricted file upload vulnerability that allows authenticated users to upload a PHP shell and execute commands remotely. Exploit Title: Open eClass 3.15 - RCE Date: Mar 15, 2024 Exploit Author: Georgios Roumeliotis Vendor Homepage: https://www.openeclass.or...

CVE-2024-31027

Cross Site Scripting vulnerability in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality...

CVE-2024-31026

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

CVE-2024-31026

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

PT-2026-102823

Cross Site Scripting vulnerability in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality...

PT-2026-102822

Name of the Vulnerable Software and Affected Versions Greek Universities Network GUnet Open eClass Platform version 3.15 Description A remote attacker can execute arbitrary code through the chat input field within the course module. This issue is a code injection, which occurs when an application...

CVE-2024-31026: Improper Control of Generation of Code

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

CVE-2024-31026

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

CVE-2024-31026

The Greek Universities Network (GUnet) Open eClass Platform v.3.15 is vulnerable to a code injection flaw. A remote attacker can exploit the chat input field within the course module to execute arbitrary code on the system. To remediate this issue, users should update the platform to a version th...

CVE-2024-31027

Cross Site Scripting vulnerability in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality...

CVE-2024-31027

A Cross Site Scripting (XSS) vulnerability exists in the Greek Universities Network (GUnet) Open eClass Platform v.3.15 . A remote attacker can exploit this by providing malicious input through the last name , first name , and username parameters within the user registration functionality . This ...

EUVD-2024-55775

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

CVE-2024-31027: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality...

EUVD-2024-55777

Cross Site Scripting vulnerability in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality...

CVE-2024-31027

Cross Site Scripting vulnerability in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality...