CVE-2026-63227 — Unrestricted SCORM file upload vulnerability

CVE-2026-63227

Unrestricted SCORM file upload vulnerability PUBLISHED

Description (CNA)

An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server.

Affected (CNA)

Vendor / product	Versions
An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server. / Koollab LMS	affected 5.3.2

CWE

No CWE identifiers supplied.

References

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-094/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.