Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 6:35 a.m.•27 views

CVE-2024-51142

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute arbitrary code via the svkey parameter of the storageapi.php file...

5.4CVSS6.8AI score0.00359EPSS
SaveExploits1References1
Mend
Mend
•added 2024/11/15 12:00 a.m.•13 views

CVE-2024-51142

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute arbitrary code via the svkey parameter of the storageapi.php file...

5.4CVSS6.8AI score0.00359EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/11/15 12:00 a.m.•24 views

Chamilo LMS security vulnerabilities

Chamilo LMS is an open source online learning and collaboration system from Chamilo Open Source. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS version v.1.11.26, which stems fro...

5.4CVSS6.4AI score0.00359EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/15 12:00 a.m.•24 views

PT-2024-34537 · Unknown · Chamilo Lms

Name of the Vulnerable Software and Affected Versions: Chamilo LMS version 1.11.26 Description: The issue is a Cross Site Scripting XSS vulnerability that allows an attacker to execute arbitrary code. This is achieved via the svkey parameter of the "storageapi.php" file. Recommendations: For...

5.4CVSS6.7AI score0.00359EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•9 views

CVE-2024-51142: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute arbitrary code via the svkey parameter of the storageapi.php file...

5.4CVSS6.8AI score0.00359EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/11/15 12:00 a.m.•52 views

CVE-2024-51142

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute arbitrary code via the svkey parameter of the storageapi.php file...

0.00359EPSS
SaveExploits1References1
Rows per page
Query Builder