CVE-2023-34960
Command injection in Chamilo
CVSS score
9.8
EPSS probability
%99.3
Risk score
9.7
Published
3 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
chamilo soap api rce (/webservices/additional_webservices.php)
Makefile Go / Python
GitHub
Perform with Massive Command Injection (Chamilo)
Makefile Go / Python
GitHub
Chamilo CVE-2023-34960 Batch scan/exploit
Makefile Go / Python
Nuclei: Chamilo Command Injection
Makefile Go / Python
Similar Vulnerabilities
8.8
CVE-2026-35196
OS command injection in Chamilo Lms
C
Patch verified Public Exploits:2EPSS %3
9.8
CVE-2026-45140
Chamilo LMS CStudio upload flow allows unauthenticated remote code execution
C
Patch status unknown Public Exploits:1EPSS %1
9.8
CVE-2023-34944
Unrestricted file upload in Chamilo Lms
C
Patch verifiedEPSS %1
6.1
CVE-2021-43687
Cross-site scripting in Chamilo
C
Patch verified Public Exploits:1EPSS %1
8.6
CVE-2026-34160
Missing authentication in Chamilo Lms
C
Patch verified Public Exploits:1EPSS %1
9.0
CVE-2026-45143
Chamilo LMS: Student-to-admin stored XSS in private messages via v-html
C
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-34960"