Overview
The discovery of a significant SQL Injection vulnerability – identified as CVE-2025-46101, has raised concerns due to its potential for system compromise and data leakage. This vulnerability has been located in Beakon Software’s Learning Management System Sharable Content Object Reference Model (SCORM) versions prior to 5.4.3.
This vulnerability is particularly critical since it not only allows a remote attacker to exploit the system but also to gain access to sensitive information. Given the widespread use of Beakon’s Learning Management System in academic and corporate sectors, this vulnerability could potentially impact a large number of users.
Vulnerability Summary
CVE ID: CVE-2025-46101
Severity: Critical (CVSS 9.8)
Attack Vector: Network
Privileges Required: None
User Interaction: None
Impact: Potential system compromise and data leakage
Affected Products
Share secrets securely
Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.
Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.
- • Encrypted identity
- • Private Spaces for organizations and teams
- • End-to-end encrypted chat, calls, files, and notes
- • Sensitive AI work and protected collaboration
- • Built for information that cannot leak
Our mission is to secure human work alongside AI.
Product | Affected Versions
Beakon Learning Management System (SCORM) | Prior to 5.4.3
How the Exploit Works
The vulnerability originates from a flaw within the ‘ks’ parameter in the ‘json_scorm.php’ file. By sending a specially crafted SQL command to this parameter, an attacker can manipulate the SQL query to the database. This manipulation can allow the attacker to bypass security measures, retrieve sensitive data, or even execute commands within the server.
Conceptual Example Code
Below is a conceptual example of how this vulnerability might be exploited. Please note that this is a theoretical example and may not work exactly as is.
GET /json_scorm.php?ks=' OR '1'='1 HTTP/1.1
Host: target.example.comIn this request, the attacker manipulates the ‘ks’ parameter in the URL to potentially inject malicious SQL code. The ‘OR ‘1’=’1′ is a classic SQL Injection payload, which always evaluates to true, thereby allowing the attacker to bypass any conditional statements in the SQL query.
Prevention and Mitigation
To mitigate this vulnerability, it is highly recommended that users update their Beakon Learning Management System to version 5.4.3 or later, as this version has addressed and patched this specific vulnerability.
In case immediate patching isn’t feasible, using Web Application Firewalls (WAF) or Intrusion Detection Systems (IDS) can provide temporary mitigation. These systems can help identify and block SQL Injection attempts based on patterns and anomalies.
Remember, ensuring your systems are regularly updated and monitored is a key step in maintaining a secure environment.