CVE-2023-4220-HTB-PermX

Chamilo-LMS-CVE-2023-4220-Exploit 描述 此漏洞利用程序演示了 Chamilo-LMS 中的 unrestricted 文件上传漏洞。该漏洞影响位于以下路径的大文件上传功能： root@kitploit: /main/inc/lib/javascript/bigupload/inc/bigUpload.php 受影响版本 ：Chamilo LMS = v1.11.24 该漏洞允许任意文件上传到： root@kitploit: /main/inc/lib/javascript/bigupload/files/ 漏洞 POC 步骤 1：初始设置...

CVE-2023-4220-Proof-of-concept

CVE-2023-4220-概念验证 Chamilo LMS 未授权大文件上传漏洞，可导致远程代码执行 此代码专为 HackTheBox CTF PERMX 制作和使用 Chamilo LMS v1.11.24 及更早版本中的大文件上传功能 /main/inc/lib/javascript/bigupload/inc/bigUpload.php 存在未授权文件上传漏洞，允许向服务器上传任意文件，从而允许我们上传 PHP 反向 shell 该脚本通过创建 PHP shell 文件、将其上传到服务器并启动 netcat 监听器，从而获取反向 shell 用法: python exploit....

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unres...

Cross site scripting

Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell...