Skip to content
OpenAdvisories

Vendor

Three Learning

16 known vulnerabilities.

Products

Koollab LMS 15 Koollab Learning Management System 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-63231

    Post-authentication SQL injection vulnerability

    A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeo…

    Three Learning Koollab LMS