1843 matches found
CVE-2023-34961: Improper Neutralization of Input During Web Page Generation
Chamilo v1.11.x up to v1.11.18 was discovered to contain a cross-site scripting XSS vulnerability via the /feedback/comment field...
CVE-2023-34958
Incorrect access control in Chamilo 1.11. up to 1.11.18 allows a student subscribed to a given course to download documents belonging to another student if they know the document's ID...
PT-2023-25073 · Chamilo · Chamilo
Name of the Vulnerable Software and Affected Versions: Chamilo versions 1.11. up to 1.11.18 Description: The issue allows a student subscribed to a given course to download documents belonging to another student if they know the document's ID, due to incorrect access control. Recommendations: For...
Chamilo 安全漏洞
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo versions 1.11. through 1.11.18 tha...
CVE-2023-34961
Chamilo v1.11.x up to v1.11.18 was discovered to contain a cross-site scripting XSS vulnerability via the /feedback/comment field...
CVE-2023-34962
Incorrect access control in Chamilo v1.11.x up to v1.11.18 allows a student to arbitrarily access and modify another student's personal notes...
CVE-2023-34961
Chamilo v1.11.x up to v1.11.18 was discovered to contain a cross-site scripting XSS vulnerability via the /feedback/comment field...
PT-2023-25077 · Chamilo · Chamilo
Name of the Vulnerable Software and Affected Versions: Chamilo versions 1.11.x up to 1.11.18 Description: A cross-site scripting XSS issue was found in the /feedback/comment field, allowing potential exploitation. Recommendations: For versions 1.11.x up to 1.11.18, update to a version later than...
CVE-2023-34958
Incorrect access control in Chamilo 1.11. up to 1.11.18 allows a student subscribed to a given course to download documents belonging to another student if they know the document's ID...
Chamilo LMS 安全漏洞
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo versions v1.11.x through v1.11.18...
CVE-2023-34959: Server-Side Request Forgery (SSRF)
An issue in Chamilo v1.11. up to v1.11.18 allows attackers to execute a Server-Side Request Forgery SSRF and obtain information on the services running on the server via crafted requests in the social and links tools...
CVE-2023-34961
CVE-2023-34961 affects Chamilo v1.11.x up to v1.11.18, with a cross-site scripting (XSS) vulnerability via the /feedback/comment field. The issue is documented across multiple sources (NVD, RH Red Hat, OSV, PT-2023-25077) and is associated with CVSS v3.1 base score 6.1 (Network, Low attack comple...
CVE-2023-34961
Chamilo v1.11.x up to v1.11.18 was discovered to contain a cross-site scripting XSS vulnerability via the /feedback/comment field...
CVE-2023-34959
An issue in Chamilo v1.11. up to v1.11.18 allows attackers to execute a Server-Side Request Forgery SSRF and obtain information on the services running on the server via crafted requests in the social and links tools...
PT-2023-25074 · Chamilo · Chamilo
Name of the Vulnerable Software and Affected Versions: Chamilo versions 1.11. up to 1.11.18 Description: The issue allows attackers to execute a Server-Side Request Forgery SSRF and obtain information on the services running on the server via crafted requests in the social and links tools...
CVE-2023-34959
Chamilo LMS is affected: versions 1.11.* up to 1.11.18 expose a Server-Side Request Forgery (SSRF) through crafted requests in the social and links tools, enabling an attacker to obtain information about services running on the server. The public sources do not specify a concrete patch version or...
CVE-2023-34958
CVE-2023-34958 concerns Chamilo LMS versions 1.11.* up to 1.11.18. The vulnerability is described as an inadequate access control that allows a student enrolled in a course to download documents belonging to another student if they know the document’s ID. This is an information disclosure issue r...
PT-2023-25078 · Chamilo · Chamilo
Name of the Vulnerable Software and Affected Versions: Chamilo versions 1.11.x through 1.11.18 Description: The issue is related to incorrect access control, allowing a student to access and modify another student's personal notes. Recommendations: For Chamilo versions 1.11.x through 1.11.18,...
CVE-2023-34962
CVE-2023-34962 affects Chamilo LMS v1.11.x up to v1.11.18, where an incorrect access control allowed a student to arbitrarily access and modify another student’s personal notes. The issue is documented across multiple feeds (NVD, Red Hat, OSV, CVE List, etc.) with a high impact (C/H/I/H; CVSS 3.1...