829 matches found
CVE-2023-31799
The CVE-2023-31799 vulnerability affects Chamilo LMS, specifically version 1.11.18 (and 1.11.x) where the system annnouncements parameter is vulnerable to Cross Site Scripting. The underlying issue allows a local attacker to execute arbitrary code via this parameter. In the provided documents, th...
PT-2023-23467
Name of the Vulnerable Software and Affected Versions Chamilo Lms version 1.11.18 Description A Cross Site Scripting issue allows a local attacker to execute arbitrary code via a crafted payload to the My Progress function. This enables the attacker to perform unauthorized actions on the system...
CVE-2023-31805: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local authenticated attacker to execute arbitrary code via the homepage function...
CVE-2023-31804: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the course category parameters...
CVE-2023-31801
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the skills wheel parameter...
CVE-2023-31801
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the skills wheel parameter...
PT-2023-23461 · Unknown · Chamilo Lms
Name of the Vulnerable Software and Affected Versions: Chamilo Lms version 1.11.18 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code via the forum title parameter. This enables the attacker to inject malicious scripts into the website, potentially leading...
CVE-2023-31806
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the My Progress function...
CVE-2023-31803
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the resource sequencing parameters...
CVE-2023-31805
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local authenticated attacker to execute arbitrary code via the homepage function...
CVE-2023-31806
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the My Progress function...
CVE-2023-31804
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the course category parameters...
CVE-2023-31802
The provided connected data confirms a Cross Site Scripting (XSS) vulnerability in Chamilo LMS v1.11.18. The issue allows a local attacker to execute arbitrary code via the skype and linedin_url parameters. No explicit root-cause or vulnerable component version details beyond the affected LMS ver...
CVE-2023-31801
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the skills wheel parameter...
Chamilo LMS 跨站脚本漏洞
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS version v.1.11.18. A local...
CVE-2023-31803
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the resource sequencing parameters...
CVE-2023-31807
CVE-2023-31807 affects Chamilo LMS up to v1.11.18. A cross-site scripting vulnerability in the Personal Notes feature can be triggered by a crafted payload, reportedly allowing a local attacker to execute arbitrary code. The available connected documents consistently describe the same issue but d...
CVE-2023-31803
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the resource sequencing parameters...