0x00-null/Chamilo-CVE-2023-4220-RCE-Exploit

PoC

(CVE-2023-4220) Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

view exploit source poc_in_githubauthor 0x00-nullpublished 2024-09-03catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-4220US	medium6.1	76.1% (100th)	Exploit	2023-11-28
Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to p…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.