Approved changes feed: RSS · Atom

cpe:2.3:a:wisdomgarden:tronclass:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWisdomgarden (852a855a-3260-5720-8bdb-c76c2e95ed8f)
ProductTronclass (a0e4fa72-80c8-5b4c-8741-9d7bcb15a3ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-110467 vulnerable 2026-11-03 10:16:01.162831 WisdomGarden|Tronclass - Insecure Direct Object Reference
MEDIUM (4.3)
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to view the peer review scores of any student.
Published: 2026-10-14T06:31:24.977Z
Updated: 2026-10-16T15:31:52.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-110466 vulnerable 2026-11-03 10:16:01.064423 WisdomGarden|Tronclass - Sensitive Data Exposure
MEDIUM (4.3)
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information.
Published: 2026-10-14T06:29:52.775Z
Updated: 2026-10-14T16:00:21.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-110465 vulnerable 2026-11-03 10:16:00.330289 WisdomGarden|Tronclass - Insecure Direct Object Reference
MEDIUM (4.3)
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to alter the peer review scores of any student.
Published: 2026-10-14T06:28:22.068Z
Updated: 2026-10-14T16:01:23.431Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2997 vulnerable 2026-06-08 07:55:17.939674 WisdomGarden|Tronclass - Insecure Direct Object Reference
MEDIUM (5.4)
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter to obtain a course invitation code, thereby joining any course.
Published: 2026-02-23T01:55:37.610Z
Updated: 2026-02-23T13:46:00.906Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10719 vulnerable 2026-06-08 07:02:27.414429 WisdomGarden|Tronclass - Insecure Direct Object Reference
MEDIUM (4.3)
Tronclass developed by WisdomGarden has an Insecure Direct object Reference vulnerability, allowing remote attackers with regular privilege to modify a specific parameter to access other users' files.
Published: 2025-09-19T10:06:37.226Z
Updated: 2025-09-19T11:45:03.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6738 vulnerable 2026-06-08 06:58:20.281689 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.