CVE-2021-40662

Mô tả

Tham khảo

• febin0x4e4a.wordpress.com/2022/03/22/cve-2021-40662-chamilo-lms-1-11-14-rce · Exploit
• febinj.medium.com/cve-2021-40662-chamilo-lms-1-11-14-rce-5301bad245d7 · Exploit
• support.chamilo.org/projects/1/wiki/Security_issues · Patch

Lỗ hổng khác của chamilo

• CVE-2023-3545NGHIÊM TRỌNG 9.8Improper sanitisation in `main/inc/lib/fileUpload.lib.php` in Chamilo LMS <= v1.11.20 on Windows and Apache installations allows unauthentic…
• CVE-2023-3533NGHIÊM TRỌNG 9.8Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthentica…
• CVE-2023-3368NGHIÊM TRỌNG 9.8Command injection in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to obtain re…
• CVE-2023-39061THẤP 3.5Cross Site Request Forgery (CSRF) vulnerability in Chamilo v.1.11 thru v.1.11.20 allows a remote authenticated privileged attacker to execut…
• CVE-2023-34960NGHIÊM TRỌNG 9.8A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary comm…