CVE-2023-34960

Published: Aug 1, 2023
Updated: Aug 5, 2023
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2023-34960" target="_blank" rel="noopener"> CVE-2023-34960
Severity: Critical
Exploit:

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name.