Skip to contentChamilo Lms vulnerabilities
- chamilo lmsSQL Injection vulnerability in Chamilo LMS v.1.11 thru v.1.11.20 allows a remote privileged...CVE-2023-395824.9 Medium
- chamilo lmsAn arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up...CVE-2023-349449.8 Critical
- chamilo lmsIncorrect access control in Chamilo v1.11.x up to v1.11.18 allows a student to arbitrarily access...CVE-2023-349628.1 High
- chamilo lmsChamilo v1.11.x up to v1.11.18 was discovered to contain a cross-site scripting (XSS)...CVE-2023-349616.1 Medium
- chamilo lmsAn issue in Chamilo v1.11.* up to v1.11.18 allows attackers to execute a Server-Side Request...CVE-2023-349595.3 Medium
- chamilo lmsIncorrect access control in Chamilo 1.11.* up to 1.11.18 allows a student subscribed to a given...CVE-2023-349584.3 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318075.4 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318065.4 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local authenticated...CVE-2023-318054.8 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318045.4 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318034.8 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318025.4 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318016.1 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318005.4 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-317994.8 Medium
- chamilo lmsA Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the...CVE-2022-274268.8 High
- chamilo lmsChamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blog_id...CVE-2022-274239.8 Critical
- chamilo lmsA reflected cross-site scripting (XSS) vulnerability in Chamilo LMS v1.11.13 allows attackers to...CVE-2022-274226.1 Medium
- chamilo lmsChamilo LMS v1.11.13 lacks validation on the user modification form, allowing attackers to...CVE-2022-274217.2 High
- chamilo lmsA stored cross-site scripting (XSS) vulnerability allows attackers to execute arbitrary web...CVE-2021-354154.8 Medium
- chamilo lmsChamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main...CVE-2021-354149.8 Critical
- chamilo lmsA remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x...CVE-2021-354138.8 High
- chamilo lmsChamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form,...CVE-2020-231266.1 Medium
- chamilo lmsA Chamilo LMS 1.11.14 reflected XSS vulnerability exists in main/social/search.php=q URI (social...CVE-2021-373906.1 Medium
- chamilo lmsA user without privileges in Chamilo LMS 1.11.14 can send an invitation message to another user,...CVE-2021-37391Public exploit5.4 Medium
- chamilo lmsChamilo LMS 1.11.10 does not properly manage privileges which could allow a user with Sessions...CVE-2020-231284.9 Medium
- chamilo lmsChamilo LMS 1.11.10 is affected by Cross Site Request Forgery (CSRF) via the edit_user function...CVE-2020-23127Public exploit8.8 High
- chamilo lmsChamilo before 1.8.8.6 does not adequately handle user supplied input by the index.php script,...CVE-2012-40307.5 High
- chamilo lmsChamilo LMS through 1.9.10.2 allows a link_goto.php?link_url= open redirect, a related issue to...CVE-2015-95406.1 Medium
- chamilo lmsChamilo LMS 1.11.8 and 2.x allows remote code execution through an lp_upload.php unauthenticated...CVE-2019-130829.8 Critical
- chamilo lmsChamilo Chamilo-lms version 1.11.8 and earlier contains an Incorrect Access Control vulnerability...CVE-2019-10000176.5 Medium
- chamilo lmsChamilo Chamilo-lms version 1.11.8 and earlier contains a Cross Site Scripting (XSS)...CVE-2019-10000156.1 Medium
- chamilo lmsChamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL...CVE-2018-203298.1 High
- chamilo lmsChamilo LMS version 1.11.8 contains XSS in main/social/group_view.php in the social groups tool,...CVE-2018-203285.4 Medium
- chamilo lmsChamilo LMS version 1.11.8 contains XSS in main/template/default/admin/gradebook_list.tpl in the...CVE-2018-203275.4 Medium
- chamilo lmsChamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter...CVE-2018-19990199.8 Critical
- chamilo lmsSQL injection vulnerability in the check_user_password function in main/auth/profile.php in...CVE-2013-6787Public exploit6.0 Medium