CVE-2023-34960

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

99.33% chance of exploitation in the next 30 days, 100th percentile

Nuclei

critical · CWE-77

Published

2023-08-01

Updated

2026-07-09

Proof-of-concept exploits (10)

• Aituglo/CVE-2023-3496034★ · 2023-06-09
• Jenderal92/CHAMILO-CVE-2023-349601★ · 2026-05-30
• Mantodkaz/CVE-2023-349604★ · 2023-09-05
• Pari-Malam/CVE-2023-3496023★ · 2023-07-31
• ThatNotEasy/CVE-2023-3496023★ · 2023-07-31
• YongYe-Security/CVE-2023-349600★ · 2023-07-09
• YongYe-Security/Chamilo_CVE-2023-34960-EXP0★ · 2023-07-09
• tpdlshdmlrkfmcla/cve-2023-349600★ · 2025-03-30
• Ap0dexMe0/CVE-2023-34960
• getdrive/PoC

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34960.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/chamilo_unauth_rce_cv…

Exploit collections (1)

• zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2023/CVE-2023-34960.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2023-23752
• CVE-2023-2732
• CVE-2023-27350
• CVE-2023-28121
• CVE-2023-32243
• CVE-2023-5360