CVE-2026-63227

An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server...

CVE-2026-63227 Unrestricted SCORM file upload vulnerability

An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server...

CVE-2026-63227

CVE-2026-63227 describes an unrestricted SCORM file upload vulnerability in Koollab LMS. An authenticated module designer can upload a SCORM package that contains a PHP webshell to a publicly accessible directory, enabling arbitrary code execution on the server. The CVSS 3.1 base score is 9.9 (CR...