CVE-2023-3368

CRITICAL EXPLOITED IN THE WILD NUCLEI

Chamilo LMS <= 1.11.20 - Command Injection

Title source: llm

Description

Command injection in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. This is a bypass of CVE-2023-34960.

Nuclei Templates (1)

Chamilo LMS <= v1.11.20 Unauthenticated Command Injection

CRITICALVERIFIEDby dwisiswant0

Shodan: http.component:"Chamilo" || http.component:"chamilo" || cpe:"cpe:2.3:a:chamilo:chamilo"

References (4)

[Patch] https://github.com/chamilo/chamilo-lms/commit/37be9ce7243a30259047dd4517c48ff8b21d657a

View Patch ZIP pw:eip

[Patch] https://https://github.com/chamilo/chamilo-lms/commit/4c69b294f927db62092e01b70ac9bd6e32d5b48b

[Exploit, Third Party Advisory] https://starlabs.sg/advisories/23/23-3368/

[Issue Tracking, Vendor Advisory] https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-121-2023-07-05-Critical-impact-High-risk-Unauthenticated-Command-Injection-CVE-2023-3368

Scores

CVSS v3 9.8

EPSS 0.8895

EPSS Percentile 99.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2024-09-18

InTheWild.io 2024-09-18

CWE

CWE-78

Status published

Products (1)

chamilo/chamilo < 1.11.20

Published Nov 28, 2023

Tracked Since Feb 18, 2026