Lucene search
K

8 matches found

BDU FSTEC
BDU FSTEC
added 2025/08/04 12:0 a.m.4 views

The vulnerability of the wsConvertPpt component in the Chamilo LMS e-learning and content management system allows a hacker to execute arbitrary commands.

The vulnerability of the wsConvertPpt component in the Chamilo LMS e-learning and content management system is related to the lack of measures taken to clean data at the administrative level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

10CVSS8.3AI score0.99333EPSS
Exploits9References2Affected Software1
OSV
OSV
added 2023/08/01 2:15 a.m.24 views

CVE-2023-34960

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11. up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name...

9.8CVSS8.3AI score
Exploits0References3
NVD
NVD
added 2023/08/01 2:15 a.m.18 views

CVE-2023-34960

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11. up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name...

9.8CVSS9.7AI score0.99333EPSS
Exploits9References3
ATTACKERKB
ATTACKERKB
added 2023/08/01 2:15 a.m.2 views

CVE-2023-34960

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11. up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name...

9.8CVSS6.1AI score0.99333EPSS
Exploits9References6
Prion
Prion
added 2023/08/01 2:15 a.m.29 views

Command injection

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11. up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name...

7.5CVSS9.6AI score0.99333EPSS
Exploits9References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/01 12:0 a.m.20 views

CVE-2023-34960

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11. up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name...

7.9AI score0.99333EPSS
Exploits9References3
VulnCheck KEV
VulnCheck KEV
added 2023/07/16 12:0 a.m.2 views

VulnCheck KEV: CVE-2023-34960

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11. up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name...

9.8CVSS7.7AI score0.99333EPSS
Exploits9References1
Positive Technologies
Positive Technologies
added 2023/06/13 12:0 a.m.2 views

PT-2023-25076 · Chamilo · Chamilo

Name of the Vulnerable Software and Affected Versions: Chamilo versions 1.11. through 1.11.18 Description: A command injection issue in the wsConvertPpt component allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name. Recommendations: For Chamilo versio...

10CVSS9.9AI score0.99333EPSS
Exploits9References22
Rows per page
Query Builder