Advisories · Technology
Chamilo.
Every CVE that names Chamilo among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Chamilo LMS File Upload Functionality Remote Code Execution
- Chamilo
- Unrestricted file upload
- CVSS 8.8 High
Chamilo LMS File Upload Functionality Remote Code Execution
- Chamilo
- Unrestricted file upload
- CVSS 8.8 High
Chamilo LMS File Upload Functionality Remote Code Execution
- Chamilo
- Unrestricted file upload
- CVSS 8.8 High
Chamilo LMS File Upload Functionality Remote Code Execution
- Chamilo
- Unrestricted file upload
- CVSS 7.2 High
Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability
- Chamilo
- Command injection
- CVSS 7.2 High
Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability
- Chamilo
- Command injection
- CVSS 8.1 HighCritical · CVSS 7+ and EPSS
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
- Chamilo
- Unrestricted file upload
- CVSS 9.8 CriticalCritical · CVSS 9+
Chamilo LMS Htaccess File Upload Security Bypass
- Chamilo
- CWE-178
- CVSS 9.8 CriticalCritical · CVSS 9+
Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write
- Chamilo
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Chamilo LMS Unauthenticated Command Injection
- Chamilo
- Command injection
-
Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script.
- Chamilo
-
Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php.
- Chamilo