Login Request a demo
CH
Product
Chamilo
by Chamilo · last CVE Nov 28, 2023
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities33In the news0Timeline
Severity mix
Critical 5High 10Medium 17Low 1
Severity
All severities33Critical5High10Medium17Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Chamilo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-3545
9.8
2%
Nov 28
Chamilo LMS Htaccess File Upload Security Bypass
Affected: through 1.11.20
CVE-2023-3533
9.8
3%
Nov 28
Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write
Affected: through 1.11.20
CVE-2023-3368
9.8
70%
Nov 28
Chamilo LMS Unauthenticated Command Injection
Affected: through 1.11.20
CVE-2023-34960
9.8
99%
Aug 1
A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted…
Affected: 1.11.0 through 1.11.18
CVE-2021-34187
9.8
16%
Jun 28
main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter
Affected: through 1.11.14
Showing 5