CVE-2026-35196

Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, an OS Command Injection vulnerability exists in the main/inc/ajax/gradebook.ajax.php endpoint within the exportallcertificates action, where the course code retrieved from the session variable $SESSION'cid'...

EUVD-2026-22722

Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, an OS Command Injection vulnerability exists in the main/inc/ajax/gradebook.ajax.php endpoint within the exportallcertificates action, where the course code retrieved from the session variable $SESSION'cid'...

PT-2019-6740

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.2.2 Description The issue allows users to see hidden grade items in the gradebook export, potentially leaking course information. Recommendations For versions prior to 2.2.2, update to version 2.2.2 or later to resol...