1843 matches found
CVE-2013-0739
Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script...
CVE-2013-0739
Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script...
CVE-2013-0739
Summary: CVE-2013-0739 affects Chamilo 1.9.4 and involves an XSS vulnerability in the chat.php script caused by improper validation of user-supplied input. Affected component: Chamilo 1.9.4, specifically the chat.php feature. Root cause: Improper validation of input in the chat functionality enab...
CVE-2013-0738
Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php...
CVE-2013-0738
Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php...
CVE-2013-0738
Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities affecting the pages blog.php and announcements.php . The root cause is improper input handling, enabling injected HTML/JavaScript in user-visible content. Affected versions and exact exploit details are not provided beyond the CVE ...
PT-2020-7336
Name of the Vulnerable Software and Affected Versions: Chamilo version 1.9.4 Description: The issue arises from improper validation of user-supplied input by the chat.php script, leading to a cross-site scripting XSS problem. XSS is a security vulnerability that occurs when an application include...
PT-2020-7335
Name of the Vulnerable Software and Affected Versions: Chamilo version 1.9.4 Description: The issue concerns multiple XSS and HTML Injection vulnerabilities. These vulnerabilities are found in the blog.php and announcements.php files. Recommendations: For Chamilo version 1.9.4, consider disabling...
CVE-2013-0738: Improper Neutralization of Input During Web Page Generation
Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php...
CVE-2013-0739: Improper Neutralization of Input During Web Page Generation
Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script...
CVE-2012-4030
Chamilo before 1.8.8.6 does not adequately handle user supplied input by the index.php script, which could allow remote attackers to delete arbitrary files...
Input validation
Chamilo before 1.8.8.6 does not adequately handle user supplied input by the index.php script, which could allow remote attackers to delete arbitrary files...
CVE-2012-4030
CVE-2012-4030 affects Chamilo before 1.8.8.6, where the index.php input handling is insecure, allowing remote attackers to delete arbitrary files. The issue is described in the NVD entry as a vulnerability in Chamilo that could enable unauthorized file deletion via crafted input. Public reference...
CVE-2012-4030
Chamilo before 1.8.8.6 does not adequately handle user supplied input by the index.php script, which could allow remote attackers to delete arbitrary files...
CVE-2012-4030: Improper Input Validation
Chamilo before 1.8.8.6 does not adequately handle user supplied input by the index.php script, which could allow remote attackers to delete arbitrary files...
PT-2020-7230
Name of the Vulnerable Software and Affected Versions Chamilo versions prior to 1.8.8.6 Description The issue arises from inadequate handling of user-supplied input by the index.php script, potentially allowing remote attackers to delete arbitrary files. Recommendations For versions prior to...
CVE-2015-9540
Chamilo LMS through 1.9.10.2 allows a linkgoto.php?linkurl= open redirect, a related issue to CVE-2015-5503...
Open redirect
Chamilo LMS through 1.9.10.2 allows a linkgoto.php?linkurl= open redirect, a related issue to CVE-2015-5503...