Koollab Lms
Approved changes feed: RSS · Atom
cpe:2.3:a:an_unrestricted_scorm_file_upload_vulnerability_in_koollab_lms_allowed_an_authenticated_module_designer_to_upload_a_scorm_package_containing_a_php_webshell_to_a_publicly_accessible_directory_and_execute_arbitrary_code_on_the_server.:koollab_lms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | An Unrestricted Scorm File Upload Vulnerability In Koollab Lms Allowed An Authenticated Module Designer To Upload A Scorm Package Containing A Php Webshell To A Publicly Accessible Directory And Execute Arbitrary Code On The Server. (74cd519b-d696-5803-b85a-df47092c7ac9) |
|---|---|
| Product | Koollab Lms (86b22bfb-6012-5f6b-ba2d-c9bc4fdd9355) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-63227 |
vulnerable | 2026-09-16 04:32:49.514164 |
Unrestricted SCORM file upload vulnerability
CRITICAL (9.9)
An unrestricted SCORM file upload vulnerability
in Koollab LMS allowed
an authenticated module designer to upload a SCORM package containing a PHP
webshell to a publicly accessible directory and execute arbitrary code on the
server.
Published: 2026-07-29T06:05:49.837Z
Updated: 2026-07-29T15:23:37.653Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.