Advisories · Technology
Three Learning Koollab LMS.
Every CVE that names Three Learning Koollab LMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Business logic vulnerability
- Three Learning Koollab LMS
- Broken access control
- CVSS 3.1 Low
Insecure direct object reference vulnerability
- Three Learning Koollab LMS
- Broken access control
- CVSS 4.3 Medium
Information disclosure vulnerability
- Three Learning Koollab LMS
- Information disclosure
- CVSS 5.4 Medium
Hard-coded AWS IAM credentials vulnerability
- Three Learning Koollab LMS
- Hard-coded credentials
- CVSS 6.5 Medium
Authentication bypass vulnerability
- Three Learning Koollab LMS
- Authentication bypass
- CVSS 4.8 Medium
TOTP two-factor authentication bypass vulnerability
- Three Learning Koollab LMS
- Weak cryptography or TLS
- CVSS 3.7 Low
Improper access control vulnerability
- Three Learning Koollab LMS
- Broken access control
- CVSS 3.7 Low
Improper access control vulnerability
- Three Learning Koollab LMS
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
SQL injection and unsafe deserialisation vulnerability
- Three Learning Koollab LMS
- SQL injection
- CVSS 9.9 CriticalCritical · CVSS 9+
SQL injection and unsafe deserialisation vulnerability
- Three Learning Koollab LMS
- SQL injection
- CVSS 9.9 CriticalCritical · CVSS 9+
SQL injection and unsafe deserialisation vulnerability
- Three Learning Koollab LMS
- SQL injection
- CVSS 8.1 High
Post-authentication SQL injection vulnerability
- Three Learning Koollab LMS
- SQL injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Pre-authentication error-based SQL injection vulnerability
- Three Learning Koollab LMS
- SQL injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Pre-authentication blind SQL injection vulnerability
- Three Learning Koollab LMS
- SQL injection
- CVSS 2.6 Low
Unrestricted image upload vulnerability
- Three Learning Koollab LMS
- Unrestricted file upload