CVE-2023-34960

Critical · CVSS 9.8

Chamilo LMS — Command Injection via SOAP API (CWE-77)

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: oss containerizable; CWE-77

Description

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name.

Search profile — drives PoC discovery

Symbols wsConvertPptSOAP APIConvertPptToPngwsConvertPptToPngPowerPointchamilomain/webservices/webservice_ppt2lp.php

Keywords CVE-2023-34960Chamilo command injectionwsConvertPpt exploitChamilo 1.11.18 RCEChamilo SOAP command injectionChamilo PowerPoint injection PoCChamilo webservice ppt2lpChamilo LMS remote code execution

Versions: v1.11.* up to v1.11.18

Ranked PoCs (26) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

Mr-xn/Penetration_Testing_POC candidate

known researcher

trickest

★ 0
Mantodkaz/CVE-2023-34960 needs review

recent activity

gh_search · Python

★ 4
Aituglo/CVE-2023-34960 needs review

gh_search · Python

★ 34
Ap0dexMe0/CVE-2023-34960 needs review

gh_search · Python

★ 23
Jenderal92/CHAMILO-CVE-2023-34960 needs review

recent activity

gh_search · Python

★ 1
MzzdToT/Chamilo__CVE-2023-34960_RCE needs review

trickest

★ 0
MzzdToT/HAC_Bored_Writing needs review

trickest

★ 0
Pari-Malam/CVE-2023-34960 needs review

trickest

★ 0
ThatNotEasy/CVE-2023-34960 needs review

trickest

★ 0
YongYe-Security/CVE-2023-34960 needs review

gh_search · Python

★ 0
YongYe-Security/Chamilo_CVE-2023-34960-EXP needs review

trickest

★ 0
dvtarsoul/ChExp needs review

trickest

★ 0
dvtarsoul/dvtarsoul needs review

trickest

★ 0
getdrive/PoC needs review

trickest

★ 0
h00die-gr3y/Metasploit needs review

trickest

★ 0
hheeyywweellccoommee/Chamilo__CVE-2023-34960_RCE-ouvuu needs review

trickest

★ 0
iluaster/getdrive_PoC needs review

trickest

★ 0
izj007/wechat needs review

trickest

★ 0
laohuan12138/exp-collect needs review

trickest

★ 0
lions2012/Penetration_Testing_POC needs review

trickest

★ 0
peiqiF4ck/WebFrameworkTools-5.1-main needs review

trickest

★ 0
peiqiF4ck/WebFrameworkTools-5.5 needs review

trickest

★ 0
peiqiF4ck/WebFrameworkTools-5.5-enhance needs review

trickest

★ 0
tpdlshdmlrkfmcla/cve-2023-34960 needs review

recent activity

gh_search

★ 0
tucommenceapousser/CVE-2023-34960-ex needs review

trickest

★ 0
whoami13apt/files2 needs review

trickest

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T18:30:39.000Z