CVE-2023-34962

CVE-2023-34962 affects Chamilo LMS v1.11.x up to v1.11.18, where an incorrect access control allowed a student to arbitrarily access and modify another student’s personal notes. The issue is documented across multiple feeds (NVD, Red Hat, OSV, CVE List, etc.) with a high impact (C/H/I/H; CVSS 3.1...

Chamilo LMS security vulnerabilities

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo versions v1.11.x through v1.11.18...

CVE-2023-34962: Undefined Security Weakness

Incorrect access control in Chamilo v1.11.x up to v1.11.18 allows a student to arbitrarily access and modify another student's personal notes...

CVE-2023-31807

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the personal notes function...

Chamilo LMS cross-site scripting vulnerabilities

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A cross-site scripting vulnerability exists in Chamilo LMS version v.1.11.18....

CVE-2023-31807: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the personal notes function...

PT-2023-23468

Name of the Vulnerable Software and Affected Versions Chamilo Lms version 1.11.18 Description A Cross Site Scripting issue allows a local attacker to execute arbitrary code via a crafted payload to the personal notes function. This enables the attacker to perform actions on the system that are no...

CVE-2023-31807

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the personal notes function...

CVE-2023-31807

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the personal notes function...

CVE-2023-31807

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the personal notes function...

CVE-2023-31807

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the personal notes function...

CVE-2016-1000307

Multiple Cross Site Scripting XSS Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via 1 profiledesc, aboutme, schools, occupation, companies, hobbies, favmovies, favmusic, favbooks parameters to ProfileSettings page; 2 note...

WordPress WP Symposium Plugin 15.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin wp-symposium Unauthenticated SQL Injection Vulnerability Date: 2015-07-30 Exploit Author: PizzaHatHacker Vendor Homepage: http://www.wpsymposium.com/ Version: ? = version = 15.5.1 Tested on: Apache / WordPress...