| Package | Affected versions | Patched versions |
|---|---|---|
| open eclass platform | = 1.7.3 |
GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins. Attackers with access to the platform can remotely access phpMyAdmin and, after uploading a shell, view the config.php file to obtain the MySQL password, leading to full database compromise.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free