Unrated severityNVD Advisory· Published Jul 29, 2026· Updated Jul 29, 2026
Post-authentication SQL injection vulnerability
CVE-2026-63231
Description
A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.