Lucene search
PRIOn knowledge basePRION:CVE-2023-4224HistoryNov 28, 2023 - 8:15 a.m.
Unrestricted file upload
2023-11-2808:15:00
PRIOn knowledge base
www.prio-n.com
4
file upload
chamilo lms
remote code execution
nvd
Unrestricted file upload in /main/inc/ajax/dropbox.ajax.php in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| chamilo_lms | le | 1.11.24 |
References
github.com/chamilo/chamilo-lms/commit/6f32625a012d5de2dfe8edbccb4ed14a85e310d4
github.com/chamilo/chamilo-lms/commit/e864127a440c2cab0eb62c113a04e2e904543a1f
github.com/chamilo/chamilo-lms/commit/f3d62b65ad60d68096c2674d5695339f04de0b8a
starlabs.sg/advisories/23/23-4224
support.chamilo.org/projects/chamilo-18/wiki/security_issues
Related
cvelist
cvelist
CVE-2023-4224 Chamilo LMS File Upload Functionality Remote Code Execution
2023-11-28 07:19:31
nvd
nvd
CVE-2023-4224
2023-11-28 08:15:09
cve
cve
CVE-2023-4224
2023-11-28 08:15:09
osv
osv
openvas
openvas
Chamilo LMS 1.11.x < 1.11.24 Multiple Vulnerabilities
2023-12-01 00:00:00