CVE-2021-31933

A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a parameter used for file uploads, and improper file-extension filtering for certain filenames e.g., .phar or .pht. A remote authenticated administrator is able to upload a file containin...

PT-2021-19606

Name of the Vulnerable Software and Affected Versions: Chamilo versions prior to 1.11.14 Description: A remote code execution issue exists due to improper input sanitization of a parameter used for file uploads and improper file-extension filtering for certain filenames, such as .phar or .pht. A...

CVE-2021-31933: Use of Incorrectly-Resolved Name or Reference

A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a parameter used for file uploads, and improper file-extension filtering for certain filenames e.g., .phar or .pht. A remote authenticated administrator is able to upload a file containin...