CVE-2023-3533

CVSS V2 None CVSS V3 None
Description
Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via arbitrary file write.
Overview
  • CVE ID
  • CVE-2023-3533
  • Assigner
  • STAR_Labs
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-11-28T07:06:43.738Z
  • Last Modified Date
  • 2023-11-28T07:06:43.738Z
History
Created Old Value New Value Data Type Notes
2024-06-24 20:38:48 Added to TrackCVE