🧪 CyberLab training instance. Intentionally vulnerable. Simulated only — there is no real shell, no real network access, and no host data behind these bugs.
Staff sign in

Bulk import

Import employee records from an XML file.

The parser has external entity resolution enabled (a dangerous default). A real parser would let you read files from the server.