Every CVE Search/ Get API key

CVE-2023-4220

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

8.1 HighPublic exploit

Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

76.1%Up 76.0 points since Nov 28, 2023
90%50%10%1%

What each source reports

CVE List Score used 8.1

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.

Record
CVE-2023-4220
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-434
Updated
2026-11-02
EUVDEUVD-2023-54093 8.1

Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.

Record
EUVD-2023-54093
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-9wc2-3gq5-2f4c 8.1

Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload...

Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.

Record
GHSA-9wc2-3gq5-2f4c
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-434
Updated
2026-11-02
NVD 8.1

Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.

Record
CVE-2023-4220
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-434, CWE-79
Updated
2026-11-02
OSV 8.1

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.

Record
CVE-2023-4220
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-434
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitChamilo v1.11.24 Unrestricted File Upload PHP Webshell2023-11-28
PoC in GitHubN1ghtfallXxX/CVE-2023-42202024-07-07
PoC in GitHubRai2en/CVE-2023-4220-Chamilo-LMS2024-07-07
PoC in GitHubcharlesgargasson/CVE-2023-42202024-07-07
PoC in GitHubdollarboysushil/Chamilo-LMS-Unauthenticated-File-Upload-CVE-2023-42202024-07-07
PoC in GitHubm3m0o/chamilo-lms-unauthenticated-big-upload-rce-poc2024-07-07
PoC in GitHubZiad-Sakr/Chamilo-CVE-2023-4220-Exploit2024-07-08
PoC in GitHubHO4XXX/cve-2023-4220-poc2024-07-09
PoC in GitHubnr4x4/CVE-2023-42202024-07-11
PoC in GitHubAl3xGD/CVE-2023-4220-Exploit2024-07-15
Show 18 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubgmh5225/CVE-2023-42202024-07-29
PoC in GitHubcharchit-subedi/chamilo-lms-unauthenticated-rce-poc2024-08-02
PoC in GitHubLGenAgul/CVE-2023-4220-Proof-of-concept2024-08-18
PoC in GitHubVanishedPeople/CVE-2023-42202024-08-24
PoC in GitHubthefizzyfish/CVE-2023-4220_Chamilo_RCE2024-08-24
PoC in GitHub0x00-null/Chamilo-CVE-2023-4220-RCE-Exploit2024-09-03
PoC in GitHubbueno-armando/CVE-2023-4220-RCE2024-10-23
PoC in GitHub0xDTC/Chamilo-LMS-CVE-2023-4220-Exploit2024-10-27
PoC in GitHubH4cking4All/CVE-2023-42202024-11-02
PoC in GitHuboxapavan/CVE-2023-4220-HTB-PermX2024-11-10
PoC in GitHubnumaan911098/CVE-2023-42202024-11-13
PoC in GitHubPr1or95/CVE-2023-4220-exploit2024-12-05
PoC in GitHubzora-beep/CVE-2023-42202025-01-24
Exploit-DBChamilo LMS 1.11.24 - Remote Code Execution (RCE)2025-03-18
PoC in GitHubLeast-Significant-Bit/CVE-2023-42202026-01-13
PoC in GitHubSn0wBaall/CVE-2023-4220-PoC2026-02-12
PoC in GitHubRandyNin/CVE-2023-42202026-03-24
NucleiChamilo LMS <= 1.11.24 - Remote Code Execution

History

History
RecordedChangedSources
exploits, exploits_more
exploits
aliases, publishedEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, Nuclei, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-4220 is a high vulnerability (CVSS 8.1) in Chamilo, published November 28, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 76.1%, the 99th percentile. No source names a fixed version.

References

This page doesn't list everything

The full exploit list has 1 more link.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open