GUnet Open eClass Platform (aka openeclass) prior to 3.11 might allow remote malicious users to read students' submitted assessments because it does not ensure that the web server blocks directory listings, and the data directory is inside the web root by default.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
gunet open eclass platform |