Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:3 p.m.3 views

CVE-2026-30875

Chamilo LMS is a learning management system. Prior to version 1.11.36, an arbitrary file upload vulnerability in the H5P Import feature allows authenticated users with Teacher role to achieve Remote Code Execution RCE. The H5P package validation only checks if h5p.json exists but doesn't block...

8.8CVSS6.1AI score0.00515EPSS
Exploits0References1
NVD
NVD
added 2026/03/16 8:16 p.m.6 views

CVE-2026-30875

Chamilo LMS is a learning management system. Prior to version 1.11.36, an arbitrary file upload vulnerability in the H5P Import feature allows authenticated users with Teacher role to achieve Remote Code Execution RCE. The H5P package validation only checks if h5p.json exists but doesn't block...

8.8CVSS0.00515EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/16 7:16 p.m.24 views

CVE-2026-30875 Chamilo LMS: Authenticated RCE via H5P Import

Chamilo LMS is a learning management system. Prior to version 1.11.36, an arbitrary file upload vulnerability in the H5P Import feature allows authenticated users with Teacher role to achieve Remote Code Execution RCE. The H5P package validation only checks if h5p.json exists but doesn't block...

8.8CVSS0.00515EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/16 7:16 p.m.7 views

EUVD-2026-12496

Chamilo LMS is a learning management system. Prior to version 1.11.36, an arbitrary file upload vulnerability in the H5P Import feature allows authenticated users with Teacher role to achieve Remote Code Execution RCE. The H5P package validation only checks if h5p.json exists but doesn't block...

8.8CVSS6.1AI score0.00515EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/16 7:16 p.m.6 views

CVE-2026-30875 Chamilo LMS: Authenticated RCE via H5P Import

Chamilo LMS is a learning management system. Prior to version 1.11.36, an arbitrary file upload vulnerability in the H5P Import feature allows authenticated users with Teacher role to achieve Remote Code Execution RCE. The H5P package validation only checks if h5p.json exists but doesn't block...

8.8CVSS6.1AI score0.00515EPSS
Exploits0References2
OSV
OSV
added 2026/03/16 7:16 p.m.4 views

CVE-2026-30875 Chamilo LMS: Authenticated RCE via H5P Import

Chamilo LMS is a learning management system. Prior to version 1.11.36, an arbitrary file upload vulnerability in the H5P Import feature allows authenticated users with Teacher role to achieve Remote Code Execution RCE. The H5P package validation only checks if h5p.json exists but doesn't block...

8.8CVSS6.2AI score0.00515EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.6 views

Chamilo LMS 代码注入漏洞

Chamilo LMS is an open-source online learning and collaboration system developed by Chamilo. This system supports the creation of teaching content, remote training, and online quizzes. Prior to version 1.11.36 of Chamilo LMS, there was a code injection vulnerability. This vulnerability stemmed fr...

8.8CVSS6.1AI score0.00515EPSS
Exploits0References2
Rows per page
Query Builder