Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-4220-Proof-of-concept — Chamilo LMS Unauthenticated Big Upload File that allows remote code execution | Kitploit
Tools/GitHubGitHub/lgenagul/cve-2023-4220-proof-of-concept
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationCTFPenetration Testing
GitHublgenagul/cve-2023-4220-proof-of-concept

CVE-2023-4220-Proof-of-concept

Chamilo LMS Unauthenticated Big Upload File that allows remote code execution

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
2 years agoNot yet reviewed

CVE-2023-4220-Proof-of-concept

Chamilo LMS Unauthenticated Big Upload File that allows remote code execution

CODE IS MADE AND USED FOR HACKTHEBOX CTF PERMX

Unauthenticated file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS <= v1.11.24 that lets us upload any file to the server allowing us to upload a php reverse shell

This script allows us to get a reverse shell by creating the php shell file, uploading it on the server and starting a netcat listener

usage: python exploit.py <LOCAL_IP_ADDRESS>

the php reverse shell code is used form pentestmonkey https://github.com/pentestmonkey/php-reverse-shell/blob/master/php-reverse-shell.php

Download Tool