Filtered by vendor Wisdomgarden Subscriptions
Filtered by product Tronclass Subscriptions
Total 6 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-110465 1 Wisdomgarden 1 Tronclass 2026-10-17 4.3 Medium
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to alter the peer review scores of any student.
CVE-2026-110466 1 Wisdomgarden 1 Tronclass 2026-10-17 4.3 Medium
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information.
CVE-2026-110467 1 Wisdomgarden 1 Tronclass 2026-10-17 4.3 Medium
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to view the peer review scores of any student.
CVE-2026-2997 1 Wisdomgarden 1 Tronclass 2026-04-17 5.4 Medium
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter to obtain a course invitation code, thereby joining any course.
CVE-2025-10719 1 Wisdomgarden 1 Tronclass 2026-04-15 4.3 Medium
Tronclass developed by WisdomGarden has an Insecure Direct object Reference vulnerability, allowing remote attackers with regular privilege to modify a specific parameter to access other users' files.
CVE-2024-6738 1 Wisdomgarden 1 Tronclass 2024-11-21 5.3 Medium
The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modifying the URL.