Lucene search
+L

1495 matches found

OSV
OSV
added 2024/11/01 12:0 a.m.15 views

CVE-2024-27524

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the newticket.php component...

7.1CVSS6.3AI score
SaveExploits0References4
OSV
OSV
added 2024/11/01 12:0 a.m.18 views

CVE-2024-27525

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the home.php component...

4.6CVSS6.2AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/11/01 12:0 a.m.10 views

CVE-2024-27525

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the home.php component...

6.7AI score0.00699EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.6 views

Chamilo LMS 安全漏洞

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS version 1.11.26, which stems...

7.1CVSS6AI score0.00699EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2024/11/01 12:0 a.m.16 views

CVE-2024-27524

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the newticket.php component...

0.00699EPSS
SaveExploits1References2
CVE
CVE
added 2024/11/01 12:0 a.m.49 views

CVE-2024-27525

CVE-2024-27525 is a Cross Site Scripting vulnerability in Chamilo LMS v1.11.26 exposing a privilege-escalation risk via a crafted script in the filename parameter of the home.php component. Multiple sources confirm the issue affects Chamilo LMS 1.11.26 and describe the root cause as XSS through t...

4.6CVSS6.4AI score0.00699EPSS
SaveExploits2References2Affected Software1
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.5 views

Chamilo LMS 安全漏洞

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS version 1.11.26, which stems...

7.1CVSS6AI score0.00699EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/11/01 12:0 a.m.7 views

PT-2024-21932 · Unknown · Chamilo Lms

Name of the Vulnerable Software and Affected Versions: Chamilo LMS version 1.11.26 Description: A Cross Site Scripting issue allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the home.php component. Recommendations: For Chamilo LMS version 1.11.26,...

7.1CVSS6.4AI score0.00699EPSS
SaveExploits2References7
GithubExploit
GithubExploit
added 2024/10/27 8:18 p.m.181 views

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

Chamilo LMS CVE-2023-4220 Exploit Overview This script ex...

8.1CVSS8AI score0.76084EPSS
SaveExploits27
GithubExploit
GithubExploit
added 2024/10/27 8:18 p.m.99 views

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

Chamilo LMS CVE-2023-4220 Exploit Overview This script ex...

8.1CVSS8AI score0.76084EPSS
SaveExploits27
GithubExploit
GithubExploit
added 2024/10/23 4:1 a.m.374 views

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

CVE-2023-4220-RCE Summary Starlabs advisoryhtt...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits27
Positive Technologies
Positive Technologies
added 2024/10/22 12:0 a.m.13 views

PT-2024-45: Evaluation of untrusted user input in Chamilo LMS

The vulnerability was identified in Chamilo LMS versions 1.11.x up to 1.11.26. The discovered vulnerability can be exploited by an unauthenticated attacker, if he sends SOAP request with parameter, which is evaluated without filtering, that leads to Remote Code Execution. Vulnerability status:...

9.8CVSS7.3AI score0.00323EPSS
SaveExploits1
Packet Storm
Packet Storm
added 2024/10/11 12:0 a.m.330 views

Chamilo 1.11.18 Code Injection

============================================================================================================================================= | Title : Chamilo 1.11.18 Code Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.2 64 bits ...

7.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/09/24 12:0 a.m.13 views

PT-2024-8549

Name of the Vulnerable Software and Affected Versions Chamilo LMS affected versions not specified Description The issue is related to the lack of measures to neutralize instructions in dynamically executed code in the Chamilo LMS electronic learning and content management system. Exploitation of...

10CVSS6.2AI score0.00323EPSS
SaveExploits1References8
VulnCheck KEV
VulnCheck KEV
added 2024/09/18 12:0 a.m.4 views

VulnCheck KEV: CVE-2023-3368

Command injection in /main/webservices/additionalwebservices.php in Chamilo LMS = v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. This is a bypass of CVE-2023-34960...

9.8CVSS7.9AI score0.99192EPSS
SaveExploits10References1
GithubExploit
GithubExploit
added 2024/09/03 12:16 p.m.506 views

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

CVE-2023-4220 Chamilo LMS Unauthenticated Big Upload File Re...

8.1CVSS8.2AI score0.76084EPSS
SaveExploits27
GithubExploit
GithubExploit
added 2024/08/24 3:25 p.m.252 views

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

CVE-2023-4220 Python exploit for Chamilo Unrestricted File Upl...

8.8CVSS7.9AI score0.76084EPSS
SaveExploits27
GithubExploit
GithubExploit
added 2024/08/24 3:25 p.m.172 views

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

CVE-2023-4220 Python exploit for Chamilo Unrestricted File Upl...

8.8CVSS7.9AI score0.76084EPSS
SaveExploits27
GithubExploit
GithubExploit
added 2024/08/02 6:14 a.m.233 views

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

Chamilo LMS Unauthenticated RCE PoC This is a script written...

8.1CVSS7.3AI score0.76084EPSS
SaveExploits27
GithubExploit
GithubExploit
added 2024/07/15 1:38 a.m.237 views

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

CVE-2023-4220-Exploit LMS Chamilo 1.11.24 CVE-2023-4220 Explo...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits27
Rows per page
Query Builder