Command injection in... CVE-2023-4222

- AV AC AU C I A
发布: 2023-11-28
修订: 2023-11-30

Command injection in `main/lp/openoffice_text_document.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息