VulnSocial

CVE-2020-37113Disclosure(gunet / open_eclass_platform)

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

GUnet OpenEclass 1.7.3 allows authenticated users to bypass file extension restrictions when uploading files. By renaming a PHP file to .php3 or .PhP, an attacker can upload a web shell and execute arbitrary code on the server. This vulnerability enables remote code execution by bypassing the intended file type checks in the exercise submission feature.

gunet CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-434

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • open_eclass_platform

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
gunet
Products
open_eclass_platform

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-04: 1Technical Details · 2026-02-04: 102-04
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2020-37113: HIGH] GUnet OpenEclass 1.7.3 has a critical flaw allowing attackers to upload PHP files as .php3 or .PhP, bypassing security checks for remote code execution. #CyberSecurity#cve,CVE-2020-37113,#cybersecurity https://cvefind.com/CVE-2020-37113

    Post summary

    CVE-2020-37113 exposes a remote code execution vulnerability in GUnet OpenEclass 1.7.3 by allowing attackers to upload PHP files with .php3/.PhP extensions, bypassing security checks.

    0000053
    583 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appgunetopen_eclass_platform1.7.3--

Explore more

Back to dashboardgunet CVEsopen_eclass_platform vulnerabilities