All verified exploits

CVE-2023-3533 Unauthenticated Arbitrary File Write

CVE-2023-3533 is a critical-severity vulnerability. AttackerView checks Chamilo sites for it with a live exploit check.

Deterministic critical Chamilo Added cve-verified-cve-2023-3533

Is my site vulnerable to CVE-2023-3533?

Confirms that Chamilo's file manager AJAX endpoint at /main/inc/lib/javascript/bigupload/inc/bigUpload.php is accessible and processes file uploads without authentication. Versions through 1.11.24 accept arbitrary file writes, enabling remote code execution via PHP webshell upload.

Related Chamilo exploits

Is your app exploitable through CVE-2023-3533?

Scan your domain free