Vulnerability · Published Feb 3, 2026 · Assigned by VulnCheck
CVE-2020-37116GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access
High 8.8
In plain English
A high-severity improper access control in GUnet OpenEclass from Openeclass. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.5%top 57.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins. Attackers with access to the platform can remotely access phpMyAdmin and, after uploading a shell, view the config.php file to obtain the MySQL password, leading to full database compromise.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Openeclass | GUnet OpenEclass | 1.7.3 (2007) |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- ExploitDB-48163 exploit
- Official Vendor Homepage product
- Changelog patch
- VulnCheck Advisory: GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access third-party-advisory