cve-2023-34960

cve-2023-34960 chamilo soap api rce /webservices/additionalwebservices.php...

CVE-2023-3368: Improper Neutralization of Special Elements used in an OS Command

Command injection in /main/webservices/additionalwebservices.php in Chamilo LMS = v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. This is a bypass of CVE-2023-34960...