This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220
-
Updated
Jul 27, 2024 - Python
This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220
Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.
Add a description, image, and links to the cve-2023-4220 topic page so that developers can more easily learn about it.
To associate your repository with the cve-2023-4220 topic, visit your repo's landing page and select "manage topics."