Chamilo LMS <= 1.11.14 Multiple Vulnerabilities

Chamilo LMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:chamilo:chamilolms"; if...

CVE-2021-40662

A Cross-Site Request Forgery CSRF in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted URL...

CVE-2021-40662

creationtimestamp| type| source ---|---|--- 2022-03-21 23:26:40+00:00| seen| https://t.me/cibsecurity/39350 2022-11-23 18:58:28+00:00| published-proof-of-concept| Telegram/YFXYCCVQZRGOcIyKtXLJhlRicEOjhhsvwkUuMglsfVEAzkc 2022-11-23 20:50:09+00:00| published-proof-of-concept| https://t.me/cKure/104...

CVE-2021-40662

A Cross-Site Request Forgery CSRF in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted URL...

CVE-2021-40662

A Cross-Site Request Forgery CSRF in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted URL...

CVE-2021-40662

Summary: CVE-2021-40662 describes a CSRF flaw in Chamilo LMS 1.11.14 that allows an attacker to cause a victim to execute arbitrary commands on their host via interaction with a crafted URL. The connected documents corroborate a CSRF leading to potentially remote command execution, but do not pro...