PT-2019-13117

Name of the Vulnerable Software and Affected Versions Chamilo LMS versions 1.11.8 and 2.x Description The issue allows remote code execution through an unauthenticated file upload feature in lp upload.php. It extracts a ZIP archive before checking its content, and once extracted, does not check...