CVE-2023-4226

🛠️ Chamilo LMS용 CVE-2023-4226 악용 📋 설명 CVE-2023-4226 악용을 자동화하는 Python 스크립트로, Chamilo LMS = v1.11.24의 무제한 파일 업로드 취약점입니다. PentesterMonkey 기반 PHP 웹 셸을 업로드하고 .htaccess를 구성하여 리버스 셸 을 획득합니다. 자세한 내용: STAR Labs 권고. 🔍 취약점 제품 : Chamilo LMS 심각도 : 높음 CVSS 3.1: 8.8 영향받는 버전 : = v1.11.24 설명 : 학습자 역할을 가진 사용자는...

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

🛠️ Explotación CVE-2023-4226 para Chamilo LMS 📋 Descripció...

CVE-2023-4226 Chamilo LMS File Upload Functionality Remote Code Execution

Unrestricted file upload in /main/inc/ajax/work.ajax.php in Chamilo LMS = v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files...

CVE-2023-4226

CVE-2023-4226 affects Chamilo LMS = 1.11.26 mitigates the issue. The available connected documents provide concrete details on affected location, authentication level, and remediation: upgrade to the patched release, or implement input/file validation and server hardening as described in advisori...