Skip to contentChamilo Lms vulnerabilities
- chamilo lms, chamilo-lms +1 moreChamilo: Authenticated Remote Code Execution via Unrestricted File UploadCVE-2026-29041Public exploit8.8 High
- chamilo chamilo-lms, lms +1 moreChamilo: Unauthorized access to update category of any userCVE-2025-595446.9 Medium
- chamilo chamilo-lms, lms +1 moreChamilo: Account Takeover via Stored XSS in Course DescriptionCVE-2025-595439.1 Critical
- chamilo chamilo-lms, lms +1 moreChamilo: Account Takeover via Stored XSS in Course Learning PathsCVE-2025-595429.1 Critical
- chamilo chamilo-lms, lms +1 moreChamilo: CSRF Vulnerability in Project DeletionCVE-2025-595418.1 High
- chamilo lms, chamilo-lms +1 moreChamilo: Stored Cross-Site Scripting (XSS) in Chamilo LMS Exercise FeedbackCVE-2025-595406.4 Medium
- chamilo lms, chamilo-lms +1 moreChamilo: Stored Cross Site Scripting in Skills ArgumentationCVE-2025-552898.8 High
- chamilo lms, chamilo-lms +1 moreChamilo LMS has Stored Cross Site Scripting on Social Networks Uploaded FilesCVE-2025-552089.1 Critical
- chamilo chamilo-lms, lms +1 moreChamilo: HTML injection via open parameterCVE-2025-525646.9 Medium
- chamilo chamilo-lms, lms +1 moreChamilo: PHAR deserialization bypassCVE-2025-529987.0 High
- chamilo chamilo-lms, lms +1 moreChamilo: Blind Server-Side Request Forgery (Unauth Blind SSRF)CVE-2025-501997.7 High
- chamilo chamilo-lms, lms +1 moreChamilo: Reflected XSS via page parameterCVE-2025-525635.1 Medium
- chamilo chamilo-lms, lms +1 moreChamilo: Reflected XSS via keyword_inactive parameterCVE-2025-524755.1 Medium
- chamilo chamilo-lms, lms +1 moreChamilo: Reflected XSS via keyword_active parameterCVE-2025-524765.1 Medium
- chamilo chamilo-lms, lms +1 moreChamilo: Stored Cross-Site Scripting (XSS) via Session Category NameCVE-2025-524704.8 Medium
- chamilo chamilo-lms, lms +1 moreChamilo: Friend Request Workflow Bypass - Unauthorized Friend Addition and ID Validation BypassCVE-2025-524697.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: Stored XSS Vulnerability via CSV User ImportCVE-2025-524688.8 High
- chamilo chamilo-lms, lms +1 moreChamilo: Deserialization of untrusted data in /plugin/vchamilo/views/import.php via POST configuration_file; POST course_path; POST home_path parametersCVE-2025-501988.8 High
- chamilo chamilo-lms, lms +1 moreChamilo: OS Command Injection in /main/admin/sub_language_ajax.inc.php via POST new_language parameterCVE-2025-501977.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: OS Command Injection in /plugin/vchamilo/views/editinstance.php via POST main_database parameterCVE-2025-501967.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: OS Command Injection in /plugin/vchamilo/views/manage.controller.phpCVE-2025-501957.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: OS Command Injection in /main/cron/lang/check_parse_lang.phpCVE-2025-501947.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: OS command Injection in /plugin/vchamilo/views/import.php with the POST to_main_database parameterCVE-2025-501937.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: Time-based SQL Injection in /main/webservices/registration.soap.phpCVE-2025-501928.8 High
- chamilo chamilo-lms, lms +1 moreChamilo: Error-based SQL Injection via POST userFile with the /main/exercise/hotpotatoes.php scriptCVE-2025-501917.0 High
- chamilo chamilo-lms, lms +1 moreChamilo: Error-based SQL Injection via GET openid.assoc_handle with the /index.php scriptCVE-2025-501908.8 High
- chamilo chamilo-lms, lms +1 moreChamilo: Error-based SQL InjectionCVE-2025-501897.2 High
- chamilo lms, chamilo-lms +1 moreError-based SQL Injection in Chamilo LMSCVE-2025-501887.0 High
- chamilo chamilo-lms, lms +1 moreChamilo: Stored XSS in glossary function via /main/glossary/index.php trigger in /main/tracking/course_log_resources.phpCVE-2025-524828.3 High
- chamilo chamilo-lms, lms +1 moreChamilo: Evaluation of untrusted user input leads to Remote Code ExecutionCVE-2025-501879.8 Critical
- chamilo chamilo-lms, lms +1 moreChamilo: Stored XSS via Malicious CSV Filename in user_import.phpCVE-2025-501864.8 Medium
- chamilo chamilo-lms, lms +1 moreChamilo: Potential unauthenticated blind SSRF via openid functionCVE-2024-503375.3 Medium
- chamilo chamilo-lms, lms +1 moreChamilo: Post-Auth Remote Code ExecutionCVE-2024-478868.7 High
- chamilo chamillo lmsChamilo LMS 1.11.8 Arbitrary File Upload via elfinderCVE-2018-251588.7 High
- chamilo lmsChamilo LMS Legal Consent SocialController.php deleteLegal improper authorizationCVE-2026-11065.3 Medium
- chamilo lmsAn issue was discovered in Chamillo LMS 1.11.2. The Social Network /personal_data endpoint...CVE-2025-69581Public exploit5.5 Medium
- chamilo lmsCross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute...CVE-2024-511426.1 Medium
- chamilo lmsChamilo LMS Version 1.11.26 is vulnerable to Incorrect Access Control. A non-authenticated...CVE-2024-306197.5 High
- chamilo lmsA Stored Cross-Site Scripting (XSS) Vulnerability in Chamilo LMS 1.11.26 allows a remote attacker...CVE-2024-306186.1 Medium
- chamilo lmsA Cross-Site Request Forgery (CSRF) vulnerability in Chamilo LMS 1.11.26 "/main/social/home.php,"...CVE-2024-306175.4 Medium
- chamilo lmsChamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile. Non-admin...CVE-2024-306168.8 High
- chamilo lmsCross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate...CVE-2024-275254.6 Medium
- chamilo lmsCross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate...CVE-2024-275247.1 High
- chamilo, chamilo lms +1 moreChamilo LMS File Upload Functionality Remote Code ExecutionCVE-2023-42258.8 High
- chamilo, chamilo lms +1 moreChamilo LMS File Upload Functionality Remote Code ExecutionCVE-2023-4226Public exploit8.8 High
- chamilo, chamilo lms +1 moreChamilo LMS File Upload Functionality Remote Code ExecutionCVE-2023-42248.8 High
- chamilo, chamilo lms +1 moreChamilo LMS File Upload Functionality Remote Code ExecutionCVE-2023-42238.8 High
- chamilo, chamilo lms +1 moreChamilo LMS Learning Path PPT2LP Command Injection VulnerabilityCVE-2023-42227.2 High
- chamilo, chamilo lms +1 moreChamilo LMS Learning Path PPT2LP Command Injection VulnerabilityCVE-2023-42217.2 High
- chamilo, chamilo lms +1 moreChamilo LMS Unauthenticated Big Upload File Remote Code ExecutionCVE-2023-4220Public exploitEPSS 76.1%8.1 High
- Show moreLoading…