Lucene search

K
cvelistMitreCVELIST:CVE-2013-6787
HistoryDec 05, 2013 - 6:00 p.m.

CVE-2013-6787

2013-12-0518:00:00
mitre
raw.githubusercontent.com
1

8.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.3%

SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earlier, when using the non-encrypted passwords mode set at installation, allows remote authenticated users to execute arbitrary SQL commands via the “password0” parameter.

8.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.3%