Description

A zip slip vulnerability in the file upload function of Chamilo v1.11 allows attackers to execute arbitrary code via a crafted Zip file.

Remediation

References

CVE-2022-40407

Related Vulnerabilities

phpMyAdmin Improper Restriction of XML External Entity Reference Vulnerability (CVE-2011-4107)

WordPress Plugin WordPress Gallery-NextGEN Gallery Cross-Site Request Forgery (3.28)

PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-5498)

WordPress Plugin Captcha by BestWebSoft Multiple Cross-Site Scripting Vulnerabilities (4.0.2)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-8389)

Severity

High

Classification

CVE-2022-40407 CWE-434 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities