Skip to content
Exploiting Chamilo during a Red Team engagement
Summary
During a Red Team engagement, Quarkslab source-audited Chamilo 1.11.26 and found eight vulnerabilities — file write, LFI, SSRF and XSS — chaining one into an unauthenticated remote code execution.
- Published
- Collected