2 matches found
CVE-2018-20329
Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue which may optionally be made public to extract and/or modify database information...
8.1CVSS7.4AI score
SaveExploits0References2
CVE-2018-20329: Improper Neutralization of Special Elements used in an SQL Command
Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue which may optionally be made public to extract and/or modify database information...
8.1CVSS5.8AI score0.01185EPSS
SaveExploits0References2
20