CVE-2021-31933

A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a parameter used for file uploads, and improper file-extension filtering for certain filenames (e.g., .phar or .pht). A remote authenticated administrator is able to upload a file containing arbitrary PHP code into specific directories via main/inc/lib/fileUpload.lib.php directory traversal to achieve PHP code execution.

• CWE-706

• http://packetstormsecurity.com/files/162572/Chamilo-LMS-1.11.14-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/chamilo/chamilo-lms/commit/229302139e8d23bf6862183cf219b967f6e2fbc1Patch, Third Party Advisory
• https://github.com/chamilo/chamilo-lms/commit/f65d065061a77bb2e84f73217079ce3998cf3453Patch, Third Party Advisory
• https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-48-2021-04-17-Critical-impact-high-risk-Remote-Code-ExecutionPatch, Vendor Advisory
• http://packetstormsecurity.com/files/162572/Chamilo-LMS-1.11.14-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/chamilo/chamilo-lms/commit/229302139e8d23bf6862183cf219b967f6e2fbc1Patch, Third Party Advisory
• https://github.com/chamilo/chamilo-lms/commit/f65d065061a77bb2e84f73217079ce3998cf3453Patch, Third Party Advisory
• https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-48-2021-04-17-Critical-impact-high-risk-Remote-Code-ExecutionPatch, Vendor Advisory

Published

Apr 30, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-31927An Insecure Direct Object Reference (IDOR) vulnerability in …4.3
• CVE-2021-31928Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows a…8.8
• CVE-2021-31929Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows a…4.3
• CVE-2021-3193Improper access and command validation in the Nagios Docker …9.8
• CVE-2021-31930Persistent cross-site scripting (XSS) in the web interface o…6.1
• CVE-2021-31932Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows…9.8
• CVE-2021-31934OX App Suite 7.10.4 and earlier allows XSS via a crafted con…6.1
• CVE-2021-31935OX App Suite 7.10.4 and earlier allows XSS via a crafted dis…6.1
• CVE-2021-31936Microsoft Accessibility Insights for Web Information Disclos…7.4
• CVE-2021-31937Microsoft Edge (Chromium-based) Elevation of Privilege Vulne…8.2
• CVE-2021-31938Microsoft VsCode Kubernetes Tools Extension Elevation of Pri…7.3
• CVE-2021-31939Microsoft Excel Remote Code Execution Vulnerability7.8