Lucene search

K
cvelistMitreCVELIST:CVE-2023-34960
HistoryAug 01, 2023 - 12:00 a.m.

CVE-2023-34960

2023-08-0100:00:00
mitre
www.cve.org
command injection
vulnerability
chamilo

0.922 High

EPSS

Percentile

99.0%

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name.