Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-3368
HistoryNov 28, 2023 - 7:15 a.m.

Command injection

2023-11-2807:15:00
PRIOn knowledge base
www.prio-n.com
4
command injection
chamilo lms
remote code execution
special characters
cve-2023-34960

9.8 High

AI Score

Confidence

High

0.934 High

EPSS

Percentile

99.1%

Command injection in /main/webservices/additional_webservices.php in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. This is a bypass of CVE-2023-34960.

CPENameOperatorVersion
chamilolt1.11.20

9.8 High

AI Score

Confidence

High

0.934 High

EPSS

Percentile

99.1%