Product

Chamilo LMS (< 1.11.40, < 2.0.1)

1 brief RSS

Chamilo LMS: Unauthenticated remote code execution via arbitrary file upload (CVE-2023-4220)

An unauthenticated arbitrary file upload vulnerability in Chamilo LMS versions 1.11.24 and earlier allows remote attackers to execute arbitrary code by uploading malicious web shells to the bigUpload.php endpoint.

Chamilo LMS +1 web-application-vulnerability remote-code-execution file-upload chamilo web-application sql-injection cve

2r 1t 2c updated 1d ago