Lucene search
PRIOn knowledge basePRION:CVE-2023-4223HistoryNov 28, 2023 - 8:15 a.m.
Unrestricted file upload
2023-11-2808:15:00
PRIOn knowledge base
www.prio-n.com
6
unrestricted upload
remote code execution
chamilo lms
nvd
php files
Unrestricted file upload in /main/inc/ajax/document.ajax.php in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| chamilo_lms | le | 1.11.24 |
References
github.com/chamilo/chamilo-lms/commit/3d74fb7d99bd2e287730552f7a66562417a55047
github.com/chamilo/chamilo-lms/commit/6f32625a012d5de2dfe8edbccb4ed14a85e310d4
github.com/chamilo/chamilo-lms/commit/e864127a440c2cab0eb62c113a04e2e904543a1f
starlabs.sg/advisories/23/23-4223
support.chamilo.org/projects/chamilo-18/wiki/security_issues
Related
cvelist
cvelist
CVE-2023-4223 Chamilo LMS File Upload Functionality Remote Code Execution
2023-11-28 07:18:16
cve
cve
CVE-2023-4223
2023-11-28 08:15:08
nvd
nvd
CVE-2023-4223
2023-11-28 08:15:08
osv
osv
openvas
openvas
Chamilo LMS 1.11.x < 1.11.24 Multiple Vulnerabilities
2023-12-01 00:00:00