CVE-2025-46101

Name of the Vulnerable Software and Affected Versions: Beakon Learning Management System SCORM versions prior to 5.4.3

Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the ks parameter in the "json scorm.php" file, which is vulnerable to SQL Injection.

Recommendations: For versions prior to 5.4.3, update to version 5.4.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "json scorm.php" file or avoiding the use of the ks parameter in this file until the issue is resolved.