eClass LMS version 6.2.0 suffers from ignored default credential and remote shell upload vulnerabilities.