Product

Chamilo LMS (<= 1.11.24)

1 brief RSS

Chamilo LMS: Unauthenticated remote code execution via arbitrary file upload (CVE-2023-4220)

An unauthenticated arbitrary file upload vulnerability in Chamilo LMS versions 1.11.24 and earlier allows remote attackers to execute arbitrary code by uploading malicious web shells to the bigUpload.php endpoint.

Chamilo LMS web-application-vulnerability remote-code-execution file-upload chamilo

1r 1t 1c 3h ago