CVE-2021-38745

Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execute arbitrary code via a crafted plugin. This vulnerability is triggered through user interaction with the attacker's profile page...

CVE-2022-27427

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-38745. Reason: This candidate is a duplicate of CVE-2021-38745. Notes: All CVE users should reference CVE-2021-38745 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

Chamilo LMS <= 1.11.14 Multiple Vulnerabilities

Chamilo LMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:chamilo:chamilolms"; if...

CVE-2021-38745

creationtimestamp| type| source ---|---|--- 2022-03-21 23:26:39+00:00| seen| https://t.me/cibsecurity/39349...

CVE-2021-38745

Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execute arbitrary code via a crafted plugin. This vulnerability is triggered through user interaction with the attacker's profile page...

CVE-2021-38745

CVE-2021-38745 affects Chamilo LMS v1.11.14, describing a zero‑click code injection vulnerability that allows arbitrary code execution via a crafted plugin. The issue is triggered when a user interacts with the attacker’s profile page. The provided documents confirm the vulnerability exists but d...