EUVD-2025-18878

| CVE-2025-46101 CRITICAL
2025-06-23 [email protected]
PHP SQLi Learning Management System Sharable Content Object Reference Model
9.8
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

4
Analysis Generated
Mar 15, 2026 - 22:10 vuln.today
EUVD ID Assigned
Mar 15, 2026 - 22:10 euvd
EUVD-2025-18878
PoC Detected
Oct 16, 2025 - 20:58 vuln.today
Public exploit code
CVE Published
Jun 23, 2025 - 15:15 nvd
CRITICAL 9.8

DescriptionNVD

SQL Injection vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version before 5.4.3 allows a remote attacker to obtain sensitive information via the ks parameter in json_scorm.php file

AnalysisAI

A SQL injection vulnerability (CVSS 9.8) that allows a remote attacker. Risk factors: public PoC available.

Technical ContextAI

CWE-89 (SQL Injection). CVSS 9.8 indicates critical severity with likely remote exploitation vector.

RemediationAI

Monitor vendor channels for patch availability. Implement input validation and WAF rules as interim mitigation.

Share

EUVD-2025-18878 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy