CVE-2026-63234
CRITICAL SEVERITYCVSS Score & Metrics
Base Score
9.9 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Vulnerability Description
A SQL injection and unsafe deserialisation
vulnerability in Koollab LMS allowed an authenticated attacker to inject through the manual mark
assessment endpoint, control data passed to unserialize(), write a webshell to
a publicly accessible location, and execute arbitrary code on the server.
vulnerability in Koollab LMS allowed an authenticated attacker to inject through the manual mark
assessment endpoint, control data passed to unserialize(), write a webshell to
a publicly accessible location, and execute arbitrary code on the server.
Vulnerability Details
Published Date
Last Modified
Source
NVD
Vendor
Three Learning
Product
Koollab LMS
Discussion (0)
Add Comment
No comments yet. Be the first!