EDB-52083

PoC

Chamilo LMS 1.11.24 - Remote Code Execution (RCE)

view exploit source exploit_dbtype webappsauthor Mohamed Kamel BOUZEKRIApublished 2025-03-18catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-4220USmedium6.1Exploit
Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to p…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan