CVE-2023-4220— Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
Quick assessment
Affected
Chamilo Chamilo
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Chamilo LMS是Chamilo协会的一套开源的在线学习和协作系统。该系统支持创建教学内容、远程培训和在线答题等。 Chamilo LMS v1.11.24 版本及之前版本存在安全漏洞，该漏洞源于 “/main/inc/lib/javascript/bigupload/inc/bigUpload.php”页面存在大文件上传功能存在不受限制的文件上传。
Public Exploits 3
ExploitDB · 1
EDB-52083 [webapps]
Metasploit · 1
chamilo_bigupload_webshell.rb [exploit]
Nuclei · 1
CVE-2023-4220.yaml [template]
Possible ATT&CK Techniques 3 AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by Compromise T1505.003 · Web Shell
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-4220
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
Source: CVE Program / CVE List V5
Vulnerability Description
Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
危险类型文件的不加限制上传
Source: CVE Program / CVE List V5
Vulnerability Title
Chamilo LMS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Chamilo LMS是Chamilo协会的一套开源的在线学习和协作系统。该系统支持创建教学内容、远程培训和在线答题等。 Chamilo LMS v1.11.24 版本及之前版本存在安全漏洞，该漏洞源于 “/main/inc/lib/javascript/bigupload/inc/bigUpload.php”页面存在大文件上传功能存在不受限制的文件上传。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
II. Public POCs for CVE-2023-4220
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220 | https://github.com/m3m0o/chamilo-lms-unauthenticated-big-upload-rce-poc | POC Details |
| 2 | Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell. | https://github.com/dollarboysushil/Chamilo-LMS-Unauthenticated-File-Upload-CVE-2023-4220 | POC Details |
| 3 | https://starlabs.sg/advisories/23/23-4220/ | https://github.com/charlesgargasson/CVE-2023-4220 | POC Details |
| 4 | CVE-2023-4220 POC RCE | https://github.com/insomnia-jacob/CVE-2023-4220- | POC Details |
| 5 | This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location "/main/inc/lib/javascript/bigupload/inc/bigUpload.php" in Chamilo LMS <= v1.11.24, and Attackers can obtain remote code execution via uploading of web shell. | https://github.com/Ziad-Sakr/Chamilo-LMS-CVE-2023-4220-Exploit | POC Details |
| 6 | This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location "/main/inc/lib/javascript/bigupload/inc/bigUpload.php" in Chamilo LMS <= v1.11.24, and Attackers can obtain remote code execution via uploading of web shell. | https://github.com/Ziad-Sakr/Chamilo-CVE-2023-4220-Exploit | POC Details |
| 7 | PoC for CVE-2023-4220 - Chamilo LMS - Unauthenticated File Upload in BigUpload | https://github.com/HO4XXX/cve-2023-4220-poc | POC Details |
| 8 | Proof of concept exploit for CVE-2023-4220 | https://github.com/B1TC0R3/CVE-2023-4220-PoC | POC Details |
| 9 | CVE-2023–4220 Exploit | https://github.com/nr4x4/CVE-2023-4220 | POC Details |
| 10 | LMS Chamilo 1.11.24 CVE-2023-4220 Exploit | https://github.com/Al3xGD/CVE-2023-4220-Exploit | POC Details |
| 11 | CVE-2023-4220 POC RCE | https://github.com/insomnia-jacob/CVE-2023-4220 | POC Details |
| 12 | This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220 | https://github.com/charchit-subedi/chamilo-lms-unauthenticated-rce-poc | POC Details |
| 13 | Chamilo LMS Unauthenticated Big Upload File that allows remote code execution | https://github.com/LGenAgul/CVE-2023-4220-Proof-of-concept | POC Details |
| 14 | None | https://github.com/VanishedPeople/CVE-2023-4220 | POC Details |
| 15 | Python exploit for Chamilo Unrestricted File Upload Vuln - CVE-2023-4220 | https://github.com/thefizzyfish/CVE-2023-4220 | POC Details |
| 16 | CVE-2023-4220 Chamilo Exploit | https://github.com/qrxnz/CVE-2023-4220 | POC Details |
| 17 | (CVE-2023-4220) Chamilo LMS Unauthenticated Big Upload File Remote Code Execution | https://github.com/0x00-null/-Chamilo-CVE-2023-4220-RCE-Exploit | POC Details |
| 18 | (CVE-2023-4220) Chamilo LMS Unauthenticated Big Upload File Remote Code Execution | https://github.com/0x00-null/Chamilo-CVE-2023-4220-RCE-Exploit | POC Details |
| 19 | None | https://github.com/bueno-armando/CVE-2023-4220-RCE | POC Details |
| 20 | Refurbish Chamilo LMS CVE-2023-4220 exploit written in bash | https://github.com/TanveerS1ngh/Chamilo-LMS-CVE-2023-4220-Exploit | POC Details |
| 21 | CVE-2023-4220 Chamilo Exploit | https://github.com/H4cking4All/CVE-2023-4220 | POC Details |
| 22 | Python exploit for Chamilo Unrestricted File Upload Vuln - CVE-2023-4220 | https://github.com/thefizzyfish/CVE-2023-4220_Chamilo_RCE | POC Details |
| 23 | None | https://github.com/oxapavan/CVE-2023-4220-HTB-PermX | POC Details |
| 24 | Refurbish Chamilo LMS CVE-2023-4220 exploit written in bash | https://github.com/0xDTC/Chamilo-LMS-CVE-2023-4220-Exploit | POC Details |
| 25 | https://nvd.nist.gov/vuln/detail/CVE-2023-4220 | https://github.com/numaan911098/CVE-2023-4220 | POC Details |
| 26 | Remote command execution exploit made for redteamers. | https://github.com/MikeyPPPPPPPP/CVE-2023-4220 | POC Details |
| 27 | Carga de archivos sin restricciones en la funcionalidad de carga de archivos grandes en `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` en Chamilo LMS en versiones <= 1.11.24 permite a atacantes no autenticados realizar ataques de Cross Site Scripting almacenados y obtener código remoto ejecución mediante la carga de web shell. | https://github.com/Pr1or95/CVE-2023-4220-exploit | POC Details |
| 28 | Exploit for CVE-2023-4220 | https://github.com/zora-beep/CVE-2023-4220 | POC Details |
| 29 | Chamilo LMS Unauthenticated Remote Code Execution | https://github.com/N1ghtfallXxX/CVE-2023-4220 | POC Details |
| 30 | CVE-2023-4220 POC RCE | https://github.com/gmh5225/CVE-2023-4220 | POC Details |
AI-Generated POC
Premium
Qwen3.6-35B-A3B
· 6674 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2023-4220
请登录查看更多情报信息。
Patches & Fixes for CVE-2023-4220 (1)
Other References for CVE-2023-4220 (2)
-
https://starlabs.sg/advisories/23/23-4220 third-party-advisory
Same Patch Batch · Chamilo · 2023-11-28 · 10 CVEs total
| CVE-2023-3545 | 9.8 CRITICAL | Chamilo LMS Htaccess File Upload Security Bypass |
| CVE-2023-3533 | 9.8 CRITICAL | Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write |
| CVE-2023-3368 | 9.8 CRITICAL | Chamilo LMS Unauthenticated Command Injection |
| CVE-2023-4225 | 8.8 HIGH | Chamilo LMS File Upload Functionality Remote Code Execution |
| CVE-2023-4226 | 8.8 HIGH | Chamilo LMS File Upload Functionality Remote Code Execution |
| CVE-2023-4224 | 8.8 HIGH | Chamilo LMS File Upload Functionality Remote Code Execution |
| CVE-2023-4223 | 8.8 HIGH | Chamilo LMS File Upload Functionality Remote Code Execution |
| CVE-2023-4222 | 7.2 HIGH | Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability |
| CVE-2023-4221 | 7.2 HIGH | Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability |
IV. Related Vulnerabilities
Same product: Chamilo
-
CVE-2023-4225
Chamilo LMS File Upload Functionality Remote Code Execution -
CVE-2023-4226
Chamilo LMS File Upload Functionality Remote Code Execution -
CVE-2023-4224
Chamilo LMS File Upload Functionality Remote Code Execution -
CVE-2023-4223
Chamilo LMS File Upload Functionality Remote Code Execution -
CVE-2023-4222
Chamilo LMS Learning Path PPT2LP Command Injection Vulnerabi
Same vendor: Chamilo
-
CVE-2026-114390
Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authoriz -
CVE-2026-114389
Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authoriz -
CVE-2026-114388
Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authoriz -
CVE-2026-112031
Chamilo LMS Ticket TicketManager.php addProject cross site s -
CVE-2026-45140
Chamilo LMS CStudio upload flow allows unauthenticated remot
Same weakness: CWE-434
-
CVE-2026-109218
Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Up -
CVE-2026-109384
The Innovative Form Builder <= 1.5.1 - Authenticated (Custom -
CVE-2026-111255
affiliate-toolkit <= 3.9.2 - Authenticated (Contributor+) Ar -
CVE-2026-84999
Pie Register Premium <= 3.8.4.0 - Unauthenticated Arbitrary -
CVE-2026-117607
Xerte Online Toolkits through 3.15.5 RCE via Language Pack I