1843 matches found
Chamilo 跨站脚本漏洞
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo version 1.11.x through versions...
CVE-2023-37061
Chamilo 1.11.x up to 1.11.20 allows users with an admin privilege account to insert XSS in the languages management section...
CVE-2023-37065
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the session category management section...
CVE-2023-37064
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the extra fields management section...
CVE-2023-37067
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the classes/usergroups management section...
CVE-2023-37062
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the course categories' definition...
CVE-2023-37066
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the skills wheel...
CVE-2023-37062
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the course categories' definition...
CVE-2023-37063
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the careers & promotions management section...
CVE-2023-37064
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the extra fields management section...
CVE-2023-37065
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the session category management section...
CVE-2023-37066
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the skills wheel...
CVE-2023-37067
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the classes/usergroups management section...
CVE-2023-37063
Chamilo LMS CVE-2023-37063 affects Chamilo 1.11.x up to 1.11.20. The vulnerability arises in the careers & promotions management section where an account with admin privileges can inject cross-site scripting (XSS). Impact is described as enabling script execution in that context; no specific expl...
CVE-2023-37062
Chamilo LMS 1.11.x up to 1.11.20 is affected by a cross-site scripting (XSS) vulnerability that can be triggered by an administrator when editing course categories definitions. The CVE-2023-37062 entry notes that an admin with high privileges can insert XSS, with user interaction required from th...
CVE-2023-37061
Chamilo LMS (1.11.x up to 1.11.20) is vulnerable to a cross-site scripting (XSS) issue in the languages management section that can be triggered by users with an admin privilege account. The vulnerability is documented across multiple sources, but concrete fixes or patched versions are not consis...
CVE-2023-37065
CVE-2023-37065 : Chamilo LMS 1.11.x up to 1.11.20 allows a user with an admin privilege account to inject cross-site scripting in the session category management section. Affected product: Chamilo LMS (1.11.x,
CVE-2023-37066
CVE-2023-37066 affects Chamilo 1.11.x up to 1.11.20. The vulnerability allows users with an administrator privilege account to insert cross-site scripting (XSS) in the skills wheel. Public documentation notes this is a high-privilege issue with user interaction required, but explicit exploitation...
PT-2023-25774 · Chamilo · Chamilo
Name of the Vulnerable Software and Affected Versions: Chamilo versions 1.11.x up to 1.11.20 Description: The issue allows users with an admin privilege account to insert XSS in the languages management section. Recommendations: For versions 1.11.x up to 1.11.20, as a temporary workaround, consid...
PT-2023-25776 · Chamilo · Chamilo
Name of the Vulnerable Software and Affected Versions: Chamilo versions 1.11.x up to 1.11.20 Description: The issue allows users with admin privilege accounts to insert XSS in the careers and promotions management section. This can potentially lead to malicious script execution. Recommendations:...