Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Three Learning — Vulnerabilities & Security Advisories 16

Browse all 16 CVE security advisories affecting Three Learning. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates vulnerability reports associated with the vendor Three Learning. It collects data on security weaknesses affecting their educational software and services, covering disclosures from the last five years. Readers can use this resource to track the vendor's security advisories over time, understand the specific classes of weaknesses frequently impacting their products, and examine the historical vulnerability landscape of their technology stack. The dataset focuses on common issues such as cross-site scripting, insecure authentication mechanisms, and information disclosure errors. By consolidating these records, the page provides a clear view of remediation trends and the frequency of specific bug types within the Three Learning ecosystem. This allows security professionals to identify patterns in patching cycles and assess the overall security posture of the vendor without needing to search through individual, fragmented bulletins. The collection serves as a neutral reference point for analyzing the evolution of security practices in the educational software sector, highlighting how the organization responds to reported flaws and implements fixes. Users should note that the data reflects publicly available information and may not include private or unconfirmed disclosures.

CVE ID Title CVSS Severity Published
CVE-2026-63242 Business logic vulnerability — Koollab LMS 4.3 Medium 2026-07-29
CVE-2026-63241 Insecure direct object reference vulnerability — Koollab LMS 3.1 Low 2026-07-29
CVE-2026-63240 Information disclosure vulnerability — Koollab LMS 4.3 Medium 2026-07-29
CVE-2026-63239 Hard-coded AWS IAM credentials vulnerability — Koollab LMS 5.4 Medium 2026-07-29
CVE-2026-63238 Authentication bypass vulnerability — Koollab LMS 6.5 Medium 2026-07-29
CVE-2026-63237 TOTP two-factor authentication bypass vulnerability — Koollab LMS 4.8 Medium 2026-07-29
CVE-2026-63236 Improper access control vulnerability — Koollab LMS 3.7 Low 2026-07-29
CVE-2026-63235 Improper access control vulnerability — Koollab LMS 3.7 Low 2026-07-29
CVE-2026-63234 SQL injection and unsafe deserialisation vulnerability — Koollab LMS 9.9 Critical 2026-07-29
CVE-2026-63233 SQL injection and unsafe deserialisation vulnerability — Koollab LMS 9.9 Critical 2026-07-29
CVE-2026-63232 SQL injection and unsafe deserialisation vulnerability — Koollab LMS 9.9 Critical 2026-07-29
CVE-2026-63231 Post-authentication SQL injection vulnerability — Koollab LMS 8.1 High 2026-07-29
CVE-2026-63230 Pre-authentication error-based SQL injection vulnerability — Koollab LMS 9.1 Critical 2026-07-29
CVE-2026-63229 Pre-authentication blind SQL injection vulnerability — Koollab LMS 9.1 Critical 2026-07-29
CVE-2026-63228 Unrestricted image upload vulnerability — Koollab LMS 2.6 Low 2026-07-29
CVE-2026-3007 Stored Cross-Site Scripting (XSS) Vulnerability — Koollab Learning Management System 5.4 Medium 2026-04-23

This page lists every published CVE security advisory associated with Three Learning. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.