1727 matches found
Chamilo LCMS Connect 4.1 Cross Site Scripting
Affected Vendor: http://lcms.chamilo.org/ Date: 27/03/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: Stored XSS Tested on: Windows 7 Product: LCMS Connect Version: 4.1 Description: Chamilo is an open-source under GNU/GPL licensing e-learning and content management system, aimed ...
Chamilo LMS 1.9.10 /main/calendar/agenda_list.php 跨站脚本漏洞
I. Overview ======================================================== Chamilo LMS 1.9.10 or prior versions are prone to a multiple Cross-Site Scripting Stored + Reflected & CSRF vulnerabilities. These vulnerabilities allows an attacker to gain control over valid user accounts in LMS, perform...
CVE-2015-5503
Open redirect vulnerability in the Chamilo integration module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters...
Open redirect
Open redirect vulnerability in the Chamilo integration module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters...
CVE-2015-5503
Open redirect vulnerability in the Chamilo integration module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters...
CVE-2015-5503
CVE-2015-5503 describes an open redirect in the Drupal Chamilo integration module (7.x-1.x) before 7.x-1.2. The vulnerability enables remote attackers to redirect users to arbitrary websites and conduct phishing via unspecified parameters. Affected component: Chamilo integration module in Drupal ...
CVE-2015-5503: Undefined Security Weakness
Open redirect vulnerability in the Chamilo integration module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters...
Chamilo LMS HTML Injection Vulnerability
Chamilo LMS is an open source online learning and collaboration system developed by the Chamilo Association. The system supports the creation of instructional content, distance training and online question and answer sessions. Chamilo LMS suffers from an HTML injection vulnerability that stems fr...
Chamilo LMS Cross-Site Request Forgery Vulnerability
Chamilo LMS is an open source online learning and collaboration system developed by the Chamilo Association. The system supports the creation of instructional content, distance training and online question and answer sessions. Chamilo LMS suffers from cross-site request forgery vulnerabilities th...
Chamilo LMS Cross-Site Scripting Vulnerability
Chamilo LMS is an open source online learning and collaboration system developed by the Chamilo Association. The system supports the creation of instructional content, distance training and online question and answer sessions. Chamilo LMS suffers from a cross-site scripting vulnerability that ste...
Drupal Chamilo integration module open redirection vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Chamilo integration is one of the modules that integrates with the Chamilo LMS learning management system and provides a way to view Chamilo resources in Drupal blocks. An open...
Chamilo integration - Less Critical - Open Redirect - SA-CONTRIB-2015-115
Chamilo integration module integrates Drupal with Chamilo LMS. The module has an Open Redirect vulnerability, it doesn't sufficiently check passed parameters in the URL. An attacker could trick users to visit malicious sites without realizing it. CVE identifiers issued CVE-2015-5503 Versions...
Chamilo LCMS Connect 4.1 Cross Site Request Forgery
Hi Team, Affected Vendor: http://lcms.chamilo.org/ Date: 27/03/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: XSRF Tested on: Windows 7 Product: LCMS Connect Version: 4.1 Description: Chamilo is an open-source under GNU/GPL licensing e-learning and content management system, aim...
Chamilo LCMS Connect 4.1 Clickjacking
Hi Team, Affected Vendor: http://lcms.chamilo.org/ Date: 27/03/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: Clickjacking Tested on: Windows 7 Product: LCMS Connect Version: 4.1 Description: Chamilo is an open-source under GNU/GPL licensing e-learning and content management...
Chamilo LMS 1.9.10 - Multiple Vulnerabilities
Exploit for php platform in category web applications I. Overview ======================================================== Chamilo LMS 1.9.10 or prior versions are prone to a multiple Cross-Site Scripting Stored + Reflected & CSRF vulnerabilities. These vulnerabilities allows an attacker to gain...
Chamilo LMS 1.9.10 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities
Chamilo LMS versions 1.9.10 and below suffer from cross site request forgery and cross site scripting vulnerabilities. I. Overview ======================================================== Chamilo LMS 1.9.10 or prior versions are prone to a multiple Cross-Site Scripting Stored + Reflected & CSRF...
Chamilo LMS 1.9.10 Cross Site Request Forgery / Cross Site Scripting
I. Overview ======================================================== Chamilo LMS 1.9.10 or prior versions are prone to a multiple Cross-Site Scripting Stored + Reflected & CSRF vulnerabilities. These vulnerabilities allows an attacker to gain control over valid user accounts in LMS, perform...
Chamilo LMS 1.9.10 - Multiple Vulnerabilities
Chamilo LMS 1.9.10 - Multiple Vulnerabilities I. Overview ======================================================== Chamilo LMS 1.9.10 or prior versions are prone to a multiple Cross-Site Scripting Stored + Reflected & CSRF vulnerabilities. These vulnerabilities allows an attacker to gain control...
Chamilo LMS 1.9.10 - Multiple Vulnerabilities
I. Overview ======================================================== Chamilo LMS 1.9.10 or prior versions are prone to a multiple Cross-Site Scripting Stored + Reflected & CSRF vulnerabilities. These vulnerabilities allows an attacker to gain control over valid user accounts in LMS, perform...
Chamilo LMS 1.9.8 Blind SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Chamilo LMS 1.9.8 Blind SQL Injection Date: 06-12-2014 Software Link: http://www.chamilo.org/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1...