CVE-2025-46101

PoC —

CVSS 3.1

9.8 critical

EPSS

<1%p49

Published

Jun 23, 2025 (Jun 23, 2025)

Modified

Jun 17, 2026

Description

SQL Injection vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version before 5.4.3 allows a remote attacker to obtain sensitive information via the ks parameter in json_scorm.php file

Vendors: beakon
Products: learning management system sharable content object reference model
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.