Skip to contentChamilo vulnerabilities
Newest
- chamiloChamilo LMS Htaccess File Upload Security BypassCVE-2023-35459.8 Critical
- chamiloChamilo LMS Unauthenticated Remote Code Execution via Arbitrary File WriteCVE-2023-35339.8 Critical
- chamiloChamilo LMS Unauthenticated Command InjectionCVE-2023-3368EPSS 69.7%9.8 Critical
- chamilo lmsSQL Injection vulnerability in Chamilo LMS v.1.11 thru v.1.11.20 allows a remote privileged...CVE-2023-395824.9 Medium
- chamiloCross Site Request Forgery (CSRF) vulnerability in Chamilo v.1.11 thru v.1.11.20 allows a remote...CVE-2023-390613.5 Low
- chamiloA command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18...CVE-2023-34960Public exploitEPSS 99.3%9.8 Critical
- chamiloChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the...CVE-2023-370674.8 Medium
- chamiloChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the...CVE-2023-370664.8 Medium
- chamiloChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the...CVE-2023-370654.8 Medium
- chamiloChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the extra...CVE-2023-370644.8 Medium
- chamiloChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the...CVE-2023-370634.8 Medium
- chamiloChamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the...CVE-2023-370624.8 Medium
- chamiloChamilo 1.11.x up to 1.11.20 allows users with an admin privilege account to insert XSS in the...CVE-2023-370614.8 Medium
- chamilo lmsAn arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up...CVE-2023-349449.8 Critical
- chamilo lmsIncorrect access control in Chamilo v1.11.x up to v1.11.18 allows a student to arbitrarily access...CVE-2023-349628.1 High
- chamilo lmsChamilo v1.11.x up to v1.11.18 was discovered to contain a cross-site scripting (XSS)...CVE-2023-349616.1 Medium
- chamilo lmsAn issue in Chamilo v1.11.* up to v1.11.18 allows attackers to execute a Server-Side Request...CVE-2023-349595.3 Medium
- chamilo lmsIncorrect access control in Chamilo 1.11.* up to 1.11.18 allows a student subscribed to a given...CVE-2023-349584.3 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318075.4 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318065.4 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local authenticated...CVE-2023-318054.8 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318045.4 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318034.8 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318025.4 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318016.1 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-318005.4 Medium
- chamilo lmsCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to...CVE-2023-317994.8 Medium
- chamiloChamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows...CVE-2022-420298.8 High
- chamiloA zip slip vulnerability in the file upload function of Chamilo v1.11 allows attackers to execute...CVE-2022-404078.8 High
- chamilo lmsA Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the...CVE-2022-274268.8 High
- chamiloChamilo LMS v1.11.13 was discovered to contain a cross-site scripting (XSS) vulnerability via the...CVE-2022-274256.1 Medium
- chamilo lmsChamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blog_id...CVE-2022-274239.8 Critical
- chamilo lmsA reflected cross-site scripting (XSS) vulnerability in Chamilo LMS v1.11.13 allows attackers to...CVE-2022-274226.1 Medium
- chamilo lmsChamilo LMS v1.11.13 lacks validation on the user modification form, allowing attackers to...CVE-2022-274217.2 High
- chamiloA Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary...CVE-2021-406628.8 High
- chamiloChamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which...CVE-2021-387456.8 Medium
- chamilo lmsA stored cross-site scripting (XSS) vulnerability allows attackers to execute arbitrary web...CVE-2021-354154.8 Medium
- chamilo lmsChamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main...CVE-2021-354149.8 Critical
- chamilo lmsA remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x...CVE-2021-354138.8 High
- chamilochamilo-lms v1.11.14 is affected by a Cross Site Scripting (XSS) vulnerability in /plugin...CVE-2021-436876.1 Medium
- chamilo lmsChamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form,...CVE-2020-231266.1 Medium
- chamiloChamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through...CVE-2021-373896.1 Medium
- chamilo lmsA Chamilo LMS 1.11.14 reflected XSS vulnerability exists in main/social/search.php=q URI (social...CVE-2021-373906.1 Medium
- chamilo lmsA user without privileges in Chamilo LMS 1.11.14 can send an invitation message to another user,...CVE-2021-37391Public exploit5.4 Medium
- chamilomain/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField,...CVE-2021-34187EPSS 16.2%9.8 Critical
- chamiloadmin/user_import.php in Chamilo 1.11.14 reads XML data without disabling the ability to load...CVE-2021-329256.5 Medium
- chamilo lmsChamilo LMS 1.11.10 does not properly manage privileges which could allow a user with Sessions...CVE-2020-231284.9 Medium
- chamilo lmsChamilo LMS 1.11.10 is affected by Cross Site Request Forgery (CSRF) via the edit_user function...CVE-2020-23127Public exploit8.8 High
- chamiloA remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input...CVE-2021-31933Public exploitEPSS 13.9%7.2 High
- chamiloChamilo 1.11.14 allows XSS via a main/calendar/agenda_list.php?type= URI.CVE-2021-267466.1 Medium
- Show moreLoading…