CyberRota Analysis
AI-GeneratedAn authenticated attacker can exploit a SQL injection and unsafe deserialization vulnerability in Koollab LMS through the assessment overall answer endpoint, enabling them to inject malicious code, write a webshell to a publicly accessible location, and execute arbitrary code on the server. This critical vulnerability poses a severe risk to any organization using Koollab LMS, particularly those handling sensitive data or operating in regulated environments. Organizations should prioritize immediate remediation to mitigate potential data breaches and unauthorized access.
Original NVD Description
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment overall answer endpoint, control data passed to unserialize(), write a webshell to a publicly accessible location, and execute arbitrary code on the server.