https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:26:59.392235+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-4226 CVE-2023-4226 — Chamilo LMS File Upload Functionality Remote Code Execution 2026-10-02T13:26:59.408229+00:00

Affected: Chamilo

Unrestricted file upload in `/main/inc/ajax/work.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.