Chamilo LMS CStudio upload flow allows unauthenticated remote code execution

Weak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms

Chamilo LMS affected by unauthenticated RCE in main/install folder

Chamilo LMS Vulnerable to Unauthenticated SQL Injection in chamiko-lms model.ajax.php

Chamilo: PHAR deserialization bypass

Chamilo: Time-based SQL Injection in /main/webservices/registration.soap.php

Chamilo: Error-based SQL Injection via GET openid.assoc_handle with the /index.php script

Chamilo: Evaluation of untrusted user input leads to Remote Code Execution

An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up to v1.11.18 allows attackers to execute arbitrary code via uploading a crafted SVG…

Chamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blog_id parameter at /blog/blog.php

Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php

Chamilo LMS 1.11.8 and 2.x allows remote code execution through an lp_upload.php unauthenticated file upload feature

Chamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter for the api endpoint located at /webservices/api/v2.php that can result in…

Chamilo stored XSS via user registration leads to admin account takeover

Chamilo: Blind Server-Side Request Forgery (Unauth Blind SSRF)

Chamilo LMS: Student-to-admin stored XSS in private messages via v-html

Chamilo: Account Takeover via Stored XSS in Course Description

Chamilo: Account Takeover via Stored XSS in Course Learning Paths

Chamilo: Stored Cross Site Scripting in Skills Argumentation

Chamilo LMS has Stored Cross Site Scripting on Social Networks Uploaded Files

Chamilo LMS: Stored XSS in public user-profile fields

Chamilo LMS has Privilege Escalation via API User Role Modification

Chamilo LMS has OS Command Injection via export_all_certificates action

Chamilo LMS Affected by Authenticated Arbitrary File Write via BigUpload endpoint

Chamilo LMS Affected by Remote Code Execution via eval() in Platform Settings

OS Command Injection in Chamilo LMS 1.11.36

Chamilo LMS has Arbitrary File Upload via MIME-Only Validation in Exercise Sound Upload Leads to RCE

Session Fixation in Chamilo LMS

Chamilo LMS: SQL Injection in the statistics AJAX endpoint

Chamilo LMS: Authenticated RCE via H5P Import

Chamilo: Authenticated Remote Code Execution via Unrestricted File Upload

Chamilo: Error-based SQL Injection

Chamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile

Chamilo LMS File Upload Functionality Remote Code Execution

Chamilo LMS File Upload Functionality Remote Code Execution

Chamilo LMS File Upload Functionality Remote Code Execution

Chamilo LMS File Upload Functionality Remote Code Execution

Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability

Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability

A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and execute arbitrary system commands via a crafted Phar file

A remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess…

Chamilo LMS 1.11.10 is affected by Cross Site Request Forgery (CSRF) via the edit_user function by targeting an admin user

Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata services

Path Traversal (Arbitrary File Delete) in Chamilo LMS

Chamilo: Stored XSS in glossary function via /main/glossary/index.php trigger in /main/tracking/course_log_resources.php

Chamilo: CSRF Vulnerability in Project Deletion

Incorrect access control in Chamilo v1.11.x up to v1.11.18 allows a student to arbitrarily access and modify another student's personal notes

Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue (which may optionally be…

Chamilo LMS: Database-backed PHP object injection in career deserialization

Chamilo Authenticated Remote Code Execution