CVE-2021-35414: Improper Neutralization of Special Elements used in an SQL Command

Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...