Advisories · Technology
chamilo-lms.
Every CVE that names chamilo-lms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Chamilo LMS: Blind SQL Injection in model.ajax.php via filters[groupOp] authentificated
- chamilo-lms
- SQL injection
- CVSS 6.6 Medium
Chamilo LMS: Conditional PHP execution through vendored QuickForm eval
- chamilo-lms
- Code injection
- CVSS 6.5 Medium
Chamilo LMS: CSRF in destructive skill-management AJAX actions
- chamilo-lms
- Cross-site request forgery (CSRF)
- CVSS 7.5 High
Chamilo LMS: Database-backed PHP object injection in career deserialization
- chamilo-lms
- Insecure deserialization
- CVSS 8.9 High
Chamilo LMS: Stored XSS in public user-profile fields
- chamilo-lms
- Cross-site scripting (XSS)
- CVSS 6.9 Medium
Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization in AJAX Handlers
- chamilo-lms
- Broken access control
- CVSS 5.3 Medium
Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authorization via openAnswerGrade
- chamilo-lms
- Broken access control
- CVSS 6.9 Medium
Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookController
- chamilo-lms
- Broken access control
- CVSS 5.1 Medium
Chamilo LMS Ticket TicketManager.php addProject cross site scripting
- Chamilo LMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 9.0 CriticalCritical · CVSS 9+
Chamilo LMS: Student-to-admin stored XSS in private messages via v-html
- chamilo-lms
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Chamilo LMS Stored XSS via Survey Answer Submission in reporting.php
- chamilo-lms
- Cross-site scripting (XSS)
- CVSS 7.5 High
Chamilo Authenticated Remote Code Execution
- chamilo-lms
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Chamilo stored XSS via user registration leads to admin account takeover
- chamilo-lms
- Cross-site scripting (XSS)
- CVSS 8.8 High
Chamilo LMS has Privilege Escalation via API User Role Modification
- chamilo-lms
- Privilege escalation
- Broken access control
- CVSS 8.8 High
Chamilo LMS has OS Command Injection via export_all_certificates action
- chamilo-lms
- Command injection
- CVSS 7.1 High
Chamilo LMS: IDOR in /api/course_rel_users Allows Unauthorized Enrollment of Arbitrary Users into Courses
- chamilo-lms
- Broken access control
- CVSS 6.5 Medium
Chamilo LMS: IDOR in the Notebook Module allows an attacker to view other users' private notes
- chamilo-lms
- Broken access control
- CVSS 5.1 Medium
Chamilo LMS: Stored XSS via Malicious File Upload in Social Post Attachments Leads to Arbitrary JavaScript Execution
- chamilo-lms
- Cross-site scripting (XSS)
- CVSS 8.6 High
Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata services
- chamilo-lms
- Authentication bypass
- Server-side request forgery (SSRF)
- CVSS 7.2 High
Chamilo LMS has Unauthenticated SSRF and Open Email Relay via install.ajax.php test_mailer action
- chamilo-lms
- Authentication bypass
- Server-side request forgery (SSRF)
- CVSS 7.1 High
Chamilo LMS has Authenticated SQL Injection in statistics.ajax.php users_active action (2.0 RC2)
- chamilo-lms
- SQL injection
- CVSS 5.3 Medium
Chamilo LMS has an XML External Entity (XXE) Injection
- chamilo-lms
- XML external entities (XXE)
- CVSS 6.5 Medium
Chamilo LMS has an Insecure Direct Object Reference (IDOR) - User Data Exposure
- chamilo-lms
- Broken access control
- CVSS 7.5 High
Chamilo LMS has Weak REST API Key Generation (Predictable)
- chamilo-lms
- Weak cryptography or TLS
- CVSS 6.5 Medium
Chamilo LMS has REST API PII Exposure via get_user_info_from_username
- chamilo-lms
- Broken access control
- CVSS 9.4 CriticalCritical · CVSS 9+
Weak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms
- chamilo-lms
- CWE-640
- CVSS 7.1 High
Chamilo LMS has a REST API Self-Privilege Escalation (Student → Teacher)
- chamilo-lms
- Privilege escalation
- CVSS 5.3 Medium
Chamilo LMS has unauthenticated access to Twig template source files exposes application logic
- chamilo-lms
- Information disclosure
- CVSS 7.1 High
Chamilo LMS Affected by Authenticated Arbitrary File Write via BigUpload endpoint
- chamilo-lms
- Unrestricted file upload
- CVSS 7.1 High
Chamilo LMS Critical IDOR: Any Authenticated User Can Extract All Users’ Personal Data and API Tokens
- chamilo-lms
- Broken access control
- CVSS 7.1 High
Chamilo LMS has an Insecure Direct Object Reference (IDOR)
- chamilo-lms
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Chamilo LMS affected by unauthenticated RCE in main/install folder
- chamilo-lms
- Information disclosure
- CVSS 8.8 High
Chamilo LMS Affected by Remote Code Execution via eval() in Platform Settings
- chamilo-lms
- Code injection
- CVSS 6.5 Medium
Chamilo LMS has an IDOR in REST API Stats Endpoint Exposes Any User's Learning Data
- chamilo-lms
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
OS Command Injection in Chamilo LMS 1.11.36
- chamilo-lms
- Command injection
- CVSS 4.7 Medium
Chamilo LMS has an Open Redirect via Unvalidated 'page' Parameter in Session Course Edit
- chamilo-lms
- Open redirect
- CVSS 7.5 High
Chamilo LMS has Arbitrary File Upload via MIME-Only Validation in Exercise Sound Upload Leads to RCE
- chamilo-lms
- Unrestricted file upload
- CVSS 7.1 High
Chamilo LMS has an IDOR in Gradebook Allows Cross-Course Evaluation Edit Without Ownership Check
- chamilo-lms
- Broken access control
- CVSS 7.1 High
Chamilo LMS has an IDOR in Gradebook Allows Cross-Course Deletion of Any Student's Grade Result
- chamilo-lms
- Memory corruption
- Broken access control
- CVSS 5.4 Medium
Chamilo LMS has Reflected XSS via Unsanitized http_build_query() in Exercise Question List Pagination
- chamilo-lms
- Cross-site scripting (XSS)
- CVSS 7.7 High
Server-Side Request Forgery (SSRF) in Chamilo LMS
- chamilo-lms
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Session Fixation in Chamilo LMS
- chamilo-lms
- Authentication bypass
- CVSS 8.3 High
Path Traversal (Arbitrary File Delete) in Chamilo LMS
- chamilo-lms
- Path traversal
- CVSS 0.0 None
Chamilo LMS has validation-less redirect on login page
- chamilo-lms
- Open redirect
- CVSS 6.1 Medium
Chamilo LMS: Reflected XSS in the session category listing page
- chamilo-lms
- Cross-site scripting (XSS)
- CVSS 8.8 High
Chamilo LMS: SQL Injection in the statistics AJAX endpoint
- chamilo-lms
- SQL injection
- CVSS 6.3 Medium
Chamilo LMS: User enumeration vulnerability via response
- chamilo-lms
- CWE-204
- CVSS 8.8 High
Chamilo LMS: Authenticated RCE via H5P Import
- chamilo-lms
- Code injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Chamilo LMS Vulnerable to Unauthenticated SQL Injection in chamiko-lms model.ajax.php
- chamilo-lms
- SQL injection
- CVSS 8.8 High
Chamilo: Authenticated Remote Code Execution via Unrestricted File Upload
- chamilo-lms
- Unrestricted file upload
- CVSS 6.9 Medium
Chamilo: Unauthorized access to update category of any user
- chamilo-lms
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Chamilo: Account Takeover via Stored XSS in Course Description
- chamilo-lms
- Cross-site scripting (XSS)
- CVSS 9.1 CriticalCritical · CVSS 9+
Chamilo: Account Takeover via Stored XSS in Course Learning Paths
- chamilo-lms
- Cross-site scripting (XSS)
- CVSS 8.1 High
Chamilo: CSRF Vulnerability in Project Deletion
- chamilo-lms
- Cross-site request forgery (CSRF)
- CVSS 6.4 Medium
Chamilo: Stored Cross-Site Scripting (XSS) in Chamilo LMS Exercise Feedback
- chamilo-lms
- Cross-site scripting (XSS)
- CVSS 8.8 High
Chamilo: Stored Cross Site Scripting in Skills Argumentation
- chamilo-lms
- Cross-site scripting (XSS)
- CVSS 9.1 CriticalCritical · CVSS 9+
Chamilo LMS has Stored Cross Site Scripting on Social Networks Uploaded Files
- chamilo-lms
- Cross-site scripting (XSS)
- CVSS 6.9 Medium
Chamilo: HTML injection via open parameter
- chamilo-lms
- Cross-site scripting (XSS)
- CVSS 7.0 High
Chamilo: PHAR deserialization bypass
- chamilo-lms
- Insecure deserialization
- CVSS 7.7 High
Chamilo: Blind Server-Side Request Forgery (Unauth Blind SSRF)
- chamilo-lms
- Server-side request forgery (SSRF)