Claim your blog

Record · corpus.blog/posts/01a08c54-46c9-7396-960e-2616073581e3

CVE-2021-31933 Chamilo LMS File Upload RCE

theyhack.me · published 21 April 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at theyhack.me Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 11
Words captured: 1,168

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://cwe.mitre.org/data/definitions/23.html

cwe.mitre.org

https://book.hacktricks.xyz/pentesting-web/file-upload

book.hacktricks.xyz

https://support.chamilo.org/projects/1/wiki/Security_issues

support.chamilo.org

https://github.com/chamilo/chamilo-lms/commit/f65d065061a77bb2e84f73217079ce3998cf3453

github.com

https://github.com/chamilo/chamilo-lms/blob/b17b552e76e1c3b781a6a42c471a647d4e9b9f90/main/upload/upload.document.php

github.com

https://github.com/chamilo/chamilo-lms/blob/b17b552e76e1c3b781a6a42c471a647d4e9b9f90/main/inc/lib/security.lib.php

github.com

https://github.com/chamilo/chamilo-lms/blob/b17b552e76e1c3b781a6a42c471a647d4e9b9f90/main/inc/lib/fileUpload.lib.php

github.com

https://github.com/chamilo/chamilo-lms/blob/b17b552e76e1c3b781a6a42c471a647d4e9b9f90/.htaccess

github.com

https://www.exploit-db.com/exploits/49867

exploit-db.com

https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-31933

cve.mitre.org

https://github.com/chamilo/chamilo-lms/tree/b17b552e76e1c3b781a6a42c471a647d4e9b9f90

github.com