CyberRota Analysis
AI-GeneratedAn unrestricted SCORM file upload vulnerability in Koollab LMS allows authenticated module designers to upload malicious SCORM packages containing PHP webshells, enabling arbitrary code execution on the server. This critical flaw poses a significant risk to the integrity and security of the LMS, making it essential for organizations using this platform to prioritize immediate remediation efforts. System administrators and security teams should take action to mitigate this vulnerability to prevent potential exploitation.
Original NVD Description
An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server.