CVE-2025-69581

CVE-2025-69581 Chamillo LMS 1.11.2 において問題が発見されました。Social Network /personaldata エンドポイントは、適切なキャッシュ制御が欠如しているため、ログアウト後も機密性の高いユーザー情報をそのまま公開します。ブラウザの「戻る」ボタンを使用すると、すべての個人データが復元され、同じデバイス上の権限のないユーザーが機密情報を閲覧できるようになります。これにより、プロファイリング、なりすまし、標的型攻撃、および重大なプライバシーリスクが生じます。発見者：Rivek Raj Tamang RivuDon、インド・シッキム州。...

CVE-2025-69581

An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personaldata endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Using the browser back button restores all personal data, allowing unauthorized users on the same device to...

CVE-2025-69581: Use of Cache Containing Sensitive Information

An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personaldata endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Using the browser back button restores all personal data, allowing unauthorized users on the same device to...

Chamillo LMS 1.11.8 - Arbitrary File Upload Exploit

Exploit for php platform in category web applications Exploit Title: Chamillo LMS 1.11.8 - Arbitrary File Upload Google Dork: "powered by chamilo" Exploit Author: Sohel Yousef jellyfish security team Software Link: https://chamilo.org/en/download/ Version: Chamilo 1.11.8 or lower to 1.8 Category:...

Chamillo LMS 1.11.8 - Arbitrary File Upload

Exploit Title: Chamillo LMS 1.11.8 - Arbitrary File Upload Google Dork: "powered by chamilo" Date: 2018-10-05 Exploit Author: Sohel Yousef jellyfish security team Software Link: https://chamilo.org/en/download/ Version: Chamilo 1.11.8 or lower to 1.8 Category: webapps 1. Description Any registere...

Chamillo LMS 1.11.8 - Arbitrary File Upload

Chamillo LMS 1.11.8 - Arbitrary File Upload Exploit Title: Chamillo LMS 1.11.8 - Arbitrary File Upload Google Dork: "powered by chamilo" Date: 2018-10-05 Exploit Author: Sohel Yousef jellyfish security team Software Link: https://chamilo.org/en/download/ Version: Chamilo 1.11.8 or lower to 1.8...