Skip to contentChamilo Lms vulnerabilities
- chamilo chamilo-lms, lms +1 moreChamilo: Stored Cross-Site Scripting (XSS) via Session Category NameCVE-2025-524704.8 Medium
- chamilo chamilo-lms, lms +1 moreChamilo: Friend Request Workflow Bypass - Unauthorized Friend Addition and ID Validation BypassCVE-2025-524697.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: Stored XSS Vulnerability via CSV User ImportCVE-2025-524688.8 High
- chamilo chamilo-lms, lms +1 moreChamilo: Deserialization of untrusted data in /plugin/vchamilo/views/import.php via POST configuration_file; POST course_path; POST home_path parametersCVE-2025-501988.8 High
- chamilo chamilo-lms, lms +1 moreChamilo: OS Command Injection in /main/admin/sub_language_ajax.inc.php via POST new_language parameterCVE-2025-501977.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: OS Command Injection in /plugin/vchamilo/views/editinstance.php via POST main_database parameterCVE-2025-501967.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: OS Command Injection in /plugin/vchamilo/views/manage.controller.phpCVE-2025-501957.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: OS Command Injection in /main/cron/lang/check_parse_lang.phpCVE-2025-501947.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: OS command Injection in /plugin/vchamilo/views/import.php with the POST to_main_database parameterCVE-2025-501937.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: Time-based SQL Injection in /main/webservices/registration.soap.phpCVE-2025-501928.8 High
- chamilo chamilo-lms, lms +1 moreChamilo: Error-based SQL Injection via POST userFile with the /main/exercise/hotpotatoes.php scriptCVE-2025-501917.0 High
- chamilo chamilo-lms, lms +1 moreChamilo: Error-based SQL Injection via GET openid.assoc_handle with the /index.php scriptCVE-2025-501908.8 High
- chamilo chamilo-lms, lms +1 moreChamilo: Error-based SQL InjectionCVE-2025-501897.2 High
- chamilo lms, chamilo-lms +1 moreError-based SQL Injection in Chamilo LMSCVE-2025-501887.0 High
- chamilo chamilo-lms, lms +1 moreChamilo: Stored XSS in glossary function via /main/glossary/index.php trigger in /main/tracking/course_log_resources.phpCVE-2025-524828.3 High
- chamilo chamilo-lms, lms +1 moreChamilo: Evaluation of untrusted user input leads to Remote Code ExecutionCVE-2025-501879.8 Critical
- chamilo chamilo-lms, lms +1 moreChamilo: Stored XSS via Malicious CSV Filename in user_import.phpCVE-2025-501864.8 Medium
- chamilo chamilo-lms, lms +1 moreChamilo: Potential unauthenticated blind SSRF via openid functionCVE-2024-503375.3 Medium
- chamilo chamilo-lms, lms +1 moreChamilo: Post-Auth Remote Code ExecutionCVE-2024-478868.7 High
- chamilo lmsChamilo LMS Legal Consent SocialController.php deleteLegal improper authorizationCVE-2026-11065.3 Medium
- chamilo lmsAn issue was discovered in Chamillo LMS 1.11.2. The Social Network /personal_data endpoint...CVE-2025-69581Public exploit5.5 Medium
- chamilo lmsCross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute...CVE-2024-511426.1 Medium
- chamilo lmsChamilo LMS Version 1.11.26 is vulnerable to Incorrect Access Control. A non-authenticated...CVE-2024-306197.5 High
- chamilo lmsA Stored Cross-Site Scripting (XSS) Vulnerability in Chamilo LMS 1.11.26 allows a remote attacker...CVE-2024-306186.1 Medium
- chamilo lmsA Cross-Site Request Forgery (CSRF) vulnerability in Chamilo LMS 1.11.26 "/main/social/home.php,"...CVE-2024-306175.4 Medium
- chamilo lmsChamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile. Non-admin...CVE-2024-306168.8 High
- chamilo lmsCross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate...CVE-2024-275254.6 Medium
- chamilo lmsCross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate...CVE-2024-275247.1 High
- chamilo, chamilo lms +1 moreChamilo LMS File Upload Functionality Remote Code ExecutionCVE-2023-42258.8 High
- chamilo, chamilo lms +1 moreChamilo LMS File Upload Functionality Remote Code ExecutionCVE-2023-4226Public exploit8.8 High
- chamilo, chamilo lms +1 moreChamilo LMS File Upload Functionality Remote Code ExecutionCVE-2023-42248.8 High
- chamilo, chamilo lms +1 moreChamilo LMS File Upload Functionality Remote Code ExecutionCVE-2023-42238.8 High
- chamilo, chamilo lms +1 moreChamilo LMS Learning Path PPT2LP Command Injection VulnerabilityCVE-2023-42227.2 High
- chamilo, chamilo lms +1 moreChamilo LMS Learning Path PPT2LP Command Injection VulnerabilityCVE-2023-42217.2 High
- chamilo, chamilo lms +1 moreChamilo LMS Unauthenticated Big Upload File Remote Code ExecutionCVE-2023-4220Public exploitEPSS 76.1%8.1 High
- chamilo lmsSQL Injection vulnerability in Chamilo LMS v.1.11 thru v.1.11.20 allows a remote privileged...CVE-2023-395824.9 Medium
- chamilo lmsAn arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up...CVE-2023-349449.8 Critical
- chamilo lmsIncorrect access control in Chamilo v1.11.x up to v1.11.18 allows a student to arbitrarily access...CVE-2023-349628.1 High
- chamilo lmsChamilo v1.11.x up to v1.11.18 was discovered to contain a cross-site scripting (XSS)...CVE-2023-349616.1 Medium
- chamilo lmsAn issue in Chamilo v1.11.* up to v1.11.18 allows attackers to execute a Server-Side Request...CVE-2023-349595.3 Medium
- chamilo lmsIncorrect access control in Chamilo 1.11.* up to 1.11.18 allows a student subscribed to a given...CVE-2023-349584.3 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318075.4 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318065.4 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local authenticated...CVE-2023-318054.8 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318045.4 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318034.8 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318025.4 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318016.1 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318005.4 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-317994.8 Medium
- Show moreLoading…