Chamilo-LMS-CVE-2023-4220-Exploit

Description

This exploit demonstrates an Unrestricted file upload vulnerability in Chamilo-LMS. The vulnerability affects the big file upload functionality located at:

/main/inc/lib/javascript/bigupload/inc/bigUpload.php

Affected Versions: Chamilo LMS <= v1.11.24

The vulnerability allows arbitrary files to be uploaded to:

/main/inc/lib/javascript/bigupload/files/

Vulnerability POC

Step 1: Initial Setup

First, make the exploit executable and view usage information:

chmod +x CVE-2023-4220.sh
./CVE-2023-4220.sh

Step 2: Execute Exploit

Run the exploit with required parameters:

./CVE-2023-4220.sh -f reverse_file -h host_link -p port_in_the_reverse_file

Step 3: Verification

Verify the uploaded file at:

http://target.test/main/inc/lib/javascript/bigupload/files/

Usage

Command Options

• -f: Specify the file to upload
• -h: Target host URL
• -p: Port number for connection

Example Usage

./CVE-2023-4220.sh -f shell.php -h http://target.test -p 4444

Important Notes

• Tool for security research only
• Obtain proper authorization before testing
• Test only in authorized environments
• Follow responsible disclosure practices

Technical Details

The vulnerability exists in the file upload mechanism of Chamilo LMS that fails to properly validate uploaded files in the big file upload functionality.

Affected Component

/main/inc/lib/javascript/bigupload/inc/bigUpload.php

File Storage Location

/main/inc/lib/javascript/bigupload/files/

References

• CVE-2023-4220
• Chamilo LMS Official Documentation