mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-06 02:31:38 +00:00
847 B
847 B
CVE-2023-3533
Description
Path traversal in file upload functionality in /main/webservices/additional_webservices.php
in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via arbitrary file write.
POC
Reference
Github
No PoCs found on GitHub currently.