Lucene search
+L

5192 matches found

CNVD
CNVD
•added 2021/12/07 12:00 a.m.•55 views

Chamilo LMS Remote Code Execution Vulnerability

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question answering. v1.11.x of Chamilo LMS contains a remote code execution vulnerability that can be exploit...

8.8CVSS4.8AI score0.02587EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/12/07 12:00 a.m.•55 views

Chamilo LMS SQL Injection Vulnerability (CNVD-2021-95221)

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question answering. chamilo LMS is vulnerable to a SQL injection vulnerability that originates in the main...

9.8CVSS2.1AI score0.01864EPSS
SaveExploits1References1
OSV
OSV
•added 2021/12/03 10:15 p.m.•21 views

CVE-2021-35414

Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...

9.8CVSS8.2AI score
SaveExploits0References7
OSV
OSV
•added 2021/12/03 10:15 p.m.•26 views

CVE-2021-35413

A remote code execution RCE vulnerability in courseintropdfimport.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file...

8.8CVSS8.1AI score
SaveExploits0References4
attackerkb
attackerkb
•added 2021/12/03 10:15 p.m.•8 views

CVE-2021-35414

Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...

9.8CVSS6AI score0.01864EPSS
SaveExploits1References8
NVD
NVD
•added 2021/12/03 10:15 p.m.•32 views

CVE-2021-35413

A remote code execution RCE vulnerability in courseintropdfimport.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file...

8.8CVSS0.02587EPSS
SaveExploits1References4
NVD
NVD
•added 2021/12/03 10:15 p.m.•37 views

CVE-2021-35414

Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...

9.8CVSS0.01864EPSS
SaveExploits1References7
Prion
Prion
•added 2021/12/03 10:15 p.m.•23 views

Remote code execution

A remote code execution RCE vulnerability in courseintropdfimport.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file...

6CVSS8.7AI score0.02587EPSS
SaveExploits1References4Affected Software1
Prion
Prion
•added 2021/12/03 10:15 p.m.•25 views

Sql injection

Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...

7.5CVSS9.7AI score0.01864EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
•added 2021/12/03 9:07 p.m.•42 views

CVE-2021-35414

Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...

10AI score0.01864EPSS
SaveExploits1References7
CVE
CVE
•added 2021/12/03 9:07 p.m.•100 views

CVE-2021-35414

CVE-2021-35414 (Chamilo LMS) affects Chamilo LMS v1.11.x via a SQL injection in the file path main/plagiarism/compilatio/upload.php, exploited through the doc parameter. The vulnerability originates from an unsafely handled parameter leading to a SQL injection vulnerability in a module related to...

9.8CVSS9.8AI score0.01864EPSS
SaveExploits1References7Affected Software1
Mend
Mend
•added 2021/12/03 9:07 p.m.•1 views

CVE-2021-35414

Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...

9.8CVSS0.01864EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2021/12/03 9:07 p.m.•35 views

CVE-2021-35413

A remote code execution RCE vulnerability in courseintropdfimport.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file...

9.4AI score0.02587EPSS
SaveExploits1References4
CVE
CVE
•added 2021/12/03 9:07 p.m.•88 views

CVE-2021-35413

CVE-2021-35413 affects Chamilo LMS v1.11.x. The vulnerability is in course_intro_pdf_import.php and allows an authenticated attacker to run arbitrary code via a crafted .htaccess file. Reported impact is remote code execution with high severity (CVSS v3.1: C:H, I:H, A:H; network vector; PR: Low; ...

8.8CVSS8.8AI score0.02587EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2021/12/03 9:07 p.m.•2 views

CVE-2021-35413

A remote code execution RCE vulnerability in courseintropdfimport.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file...

8.8CVSS0.02587EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/12/03 12:00 a.m.•3 views

PT-2021-20907

Name of the Vulnerable Software and Affected Versions: Chamilo LMS version v1.11.x Description: A remote code execution RCE vulnerability in the course intro pdf import.php file allows authenticated attackers to execute arbitrary code via a crafted .htaccess file. Recommendations: For version...

8.8CVSS0.02587EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/03 12:00 a.m.•6 views

CVE-2021-35413: Missing Authorization

A remote code execution RCE vulnerability in courseintropdfimport.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file...

8.8CVSS6.8AI score0.02587EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/12/03 12:00 a.m.•14 views

Chamilo LMS 代码注入漏洞

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question answering. v1.11.x of Chamilo LMS contains a remote code execution vulnerability that can be exploit...

8.8CVSS6.9AI score0.02587EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2021/12/03 12:00 a.m.•19 views

Chamilo LMS SQL注入漏洞

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question answering. chamilo LMS is vulnerable to a SQL injection vulnerability that originates in the main...

9.8CVSS5.9AI score0.01864EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/03 12:00 a.m.•6 views

CVE-2021-35414: Improper Neutralization of Special Elements used in an SQL Command

Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...

9.8CVSS5.8AI score0.01864EPSS
SaveExploits1References2
Rows per page
Query Builder