CVE-2023-34960
82Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 99%
from disclosure to weapon0 days
Published on NVDAug 1
1st PoCJun 9
metasploitJun 1
VulnCheckJul 16
exploitation probability
99%top 1% of all CVEs
observed exploitation
yesVulnCheck
6 public exploit(s)
A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name.
Affected products
n/a · n/apublic PoCs found — 6
vulncheckvulncheck.com/xdb/f4b020c87d9bunverifiedvulncheckvulncheck.com/xdb/5edaf229dabdunverifiedvulncheckvulncheck.com/xdb/4b31504a988bunverifiedvulncheckvulncheck.com/xdb/d36a306c839bunverifiedvulncheckvulncheck.com/xdb/61c215d237ebunverifiedvulncheckvulncheck.com/xdb/f7c25d3f64deunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.