exploitDog

CVE-2025-46101

Опубликовано: 23 июн. 2025

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

SQL Injection vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version before 5.4.3 allows a remote attacker to obtain sensitive information via the ks parameter in json_scorm.php file

Ссылки

https://packetstorm.news/files/id/200942/
Exploit
Third Party Advisory
https://packetstorm.news/files/id/200942/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:beakon:learning_management_system_sharable_content_object_reference_model:*:*:*:*:*:*:*:*

Версия до 5.4.3 (исключая)

EPSS

Процентиль: 32%

0.00128

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-rj63-phmh-hrgw

CVSS3: 9.8

github

8 месяцев назад

SQL Injection vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version before 5.4.3 allows a remote attacker to obtain sensitive information via the ks parameter in json_scorm.php file

EPSS

Процентиль: 32%

0.00128

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89