Lucene search
PRIOn knowledge basePRION:CVE-2023-4220HistoryNov 28, 2023 - 8:15 a.m.
Cross site scripting
2023-11-2808:15:00
PRIOn knowledge base
www.prio-n.com
2
cross site scripting
unauthenticated attackers
stored attacks
remote code execution
file upload vulnerability
big file upload functionality
chamilo lms security bug
Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.
| CPE | Name | Operator | Version |
|---|---|---|---|
| chamilo_lms | le | 1.11.24 |
Related
cvelist
cvelist
osv
osv
CVE-2023-4220
2023-11-28 08:15:07
cve
cve
CVE-2023-4220
2023-11-28 08:15:07
nvd
nvd
CVE-2023-4220
2023-11-28 08:15:07
openvas
openvas
Chamilo LMS 1.11.x < 1.11.24 Multiple Vulnerabilities
2023-12-01 00:00:00