1498 matches found
Chamilo LMS 1.11.14 - Account Takeover
Exploit Title: Chamilo LMS 1.11.14 - Account Takeover Date: July 21 2021 Exploit Author: sirpedrotavares Vendor Homepage: https://chamilo.org Software Link: https://chamilo.org Version: Chamilo-lms-1.11.x Tested on: Chamilo-lms-1.11.x CVE: CVE-2021-37391 Publication:...
Chamilo LMS Remote Code Execution Vulnerability
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question answering. v1.11.x of Chamilo LMS contains a remote code execution vulnerability that can be exploit...
Chamilo LMS SQL Injection Vulnerability (CNVD-2021-95221)
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question answering. chamilo LMS is vulnerable to a SQL injection vulnerability that originates in the main...
Chamilo LMS Cross-Site Scripting Vulnerability (CNVD-2021-95220)
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association that supports the creation of instructional content, remote training, and online question answering. Chamilo LMS is vulnerable to a cross-site scripting vulnerability that could be exploited to...
Chamilo LMS < 1.11.12 Multiple Vulnerabilities
Chamilo LMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:chamilo:chamilolms"; if...
CVE-2021-35413
A remote code execution RCE vulnerability in courseintropdfimport.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file...
CVE-2021-35414
Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...
CVE-2021-35414
Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...
CVE-2021-35413
A remote code execution RCE vulnerability in courseintropdfimport.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file...
Sql injection
Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...
Remote code execution
A remote code execution RCE vulnerability in courseintropdfimport.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file...
CVE-2021-35414
CVE-2021-35414 (Chamilo LMS) affects Chamilo LMS v1.11.x via a SQL injection in the file path main/plagiarism/compilatio/upload.php, exploited through the doc parameter. The vulnerability originates from an unsafely handled parameter leading to a SQL injection vulnerability in a module related to...
CVE-2021-35414
Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...
CVE-2021-35413
CVE-2021-35413 affects Chamilo LMS v1.11.x. The vulnerability is in course_intro_pdf_import.php and allows an authenticated attacker to run arbitrary code via a crafted .htaccess file. Reported impact is remote code execution with high severity (CVSS v3.1: C:H, I:H, A:H; network vector; PR: Low; ...
CVE-2021-35413
A remote code execution RCE vulnerability in courseintropdfimport.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file...
Chamilo LMS SQL注入漏洞
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question answering. chamilo LMS is vulnerable to a SQL injection vulnerability that originates in the main...
Chamilo LMS 跨站脚本漏洞
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association that supports the creation of instructional content, remote training, and online question answering. Chamilo LMS is vulnerable to a cross-site scripting vulnerability that could be exploited to...
Chamilo LMS 代码注入漏洞
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question answering. v1.11.x of Chamilo LMS contains a remote code execution vulnerability that can be exploit...
Chamilo LMS Cross-Site Scripting Vulnerability (CNVD-2021-95223)
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question answering, etc. A cross-site scripting vulnerability exists in Chamilo LMS, which stems from a...