CVE Intelligence

An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a Koollab LMS vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a Koollab LMS: 1 record(s), with affected versions and fixes.

CVE-2026-63227 Critical · 9.9 CWE-434 Jul 29, 2026
Unrestricted SCORM file upload vulnerability
An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server.