Login Request a demo
CH
Product
chamilo-lms
by chamilo · last CVE Oct 21, 2026
130
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Vulnerabilities130In the news0Timeline
Severity mix
Critical 20High 49Medium 60Low 0
Severity
All severities130Critical20High49Medium60Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add chamilo-lms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45140
9.8
1%
Sep 17
Chamilo LMS CStudio upload flow allows unauthenticated remote code execution
Affected: < 2.0.1
CVE-2026-33707
9.8
0%
Apr 10
Weak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms
Affected: < 1.11.38; >= 2.0.0-alpha.1, < 2.0.0-RC.3
CVE-2026-33698
9.8
0%
Apr 10
Chamilo LMS affected by unauthenticated RCE in main/install folder
Affected: < 1.11.38
CVE-2026-28430
9.8
0%
Mar 16
Chamilo LMS Vulnerable to Unauthenticated SQL Injection in chamiko-lms model.ajax.php
Affected: < 1.11.34
CVE-2025-52998
9.8
0%
Mar 2
Chamilo is a learning management system
Affected: before 1.11.30
CVE-2025-50192
9.8
1%
Mar 2
Chamilo is a learning management system
Affected: before 1.11.30
CVE-2025-50190
9.8
1%
Mar 2
Chamilo is a learning management system
Affected: before 1.11.30
CVE-2025-50187
9.8
1%
Mar 2
Chamilo is a learning management system
Affected: before 1.11.28
CVE-2023-34944
9.8
1%
Jun 13
An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up to v1.11.18 allows attackers to execute arbitrary code via uploading a crafted SVG…
Affected: 1.11.0 through 1.11.18
CVE-2022-27423
9.8
1%
Apr 15
Chamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blog_id parameter at /blog/blog.php
Affected: 1.11.0 through 1.11.16
CVE-2021-35414
9.8
2%
Dec 3
Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php
Affected: 1.11.0 through 1.11.16
CVE-2019-13082
9.8
4%
Jun 30
Chamilo LMS 1.11.8 and 2.x allows remote code execution through an lp_upload.php unauthenticated file upload feature
Affected: 1.11.8
CVE-2018-1999019
9.8
3%
Jul 23
Chamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter for the api endpoint located at /webservices/api/v2.php that can result in…
Affected: 1.11.0; 1.11.0; 1.11.0; 1.11.0; 1.11.0; 1.11.0; +14 more
CVE-2026-39878
9.3
0%
Jul 20
Chamilo stored XSS via user registration leads to admin account takeover
Affected: <= 1.11.38
CVE-2025-50199
9.1
0%
Mar 2
Chamilo is a learning management system
Affected: before 1.11.30
CVE-2026-45143
9.0
0%
Sep 17
Chamilo LMS: Student-to-admin stored XSS in private messages via v-html
Affected: >= 2.0.0, < 2.0.1
CVE-2025-59543
9.0
0%
Mar 6
Chamilo is a learning management system
Affected: before 1.11.34
CVE-2025-59542
9.0
0%
Mar 6
Chamilo is a learning management system
Affected: before 1.11.34
CVE-2025-55289
9.0
0%
Mar 6
Chamilo is a learning management system
Affected: before 1.11.34
CVE-2025-55208
9.0
0%
Mar 5
Chamilo is a learning management system
Affected: before 1.11.34
CVE-2026-40291
8.8
0%
Apr 14
Chamilo LMS has Privilege Escalation via API User Role Modification
Affected: < 2.0-RC.3
CVE-2026-35196
8.8
2%
Apr 14
Chamilo LMS has OS Command Injection via export_all_certificates action
Affected: < 2.0.0-RC.3
CVE-2026-33704
8.8
0%
Apr 10
Chamilo LMS Affected by Authenticated Arbitrary File Write via BigUpload endpoint
Affected: < 1.11.38
CVE-2026-33618
8.8
0%
Apr 10
Chamilo LMS Affected by Remote Code Execution via eval() in Platform Settings
Affected: >= 2.0.0-alpha.1, < 2.0.0-RC.3
CVE-2026-32892
8.8
2%
Apr 10
OS Command Injection in Chamilo LMS 1.11.36
Affected: < 1.11.38; >= 2.0.0-alpha.1, < 2.0.0-RC.3
CVE-2026-32931
8.8
0%
Apr 10
Chamilo LMS has Arbitrary File Upload via MIME-Only Validation in Exercise Sound Upload Leads to RCE
Affected: < 1.11.38; >= 2.0.0-alpha.1, < 2.0.0-RC.3
CVE-2026-31940
8.8
0%
Apr 10
Session Fixation in Chamilo LMS
Affected: < 1.11.38; >= 2.0.0-alpha.1, < 2.0.0-RC.3
CVE-2026-30881
8.8
0%
Mar 16
Chamilo LMS: SQL Injection in the statistics AJAX endpoint
Affected: < 1.11.36
CVE-2026-30875
8.8
1%
Mar 16
Chamilo LMS: Authenticated RCE via H5P Import
Affected: < 1.11.36
CVE-2026-29041
8.8
1%
Mar 6
Chamilo is a learning management system
Affected: before 1.11.34
CVE-2025-50189
8.8
1%
Mar 2
Chamilo is a learning management system
Affected: before 1.11.30
CVE-2024-30616
8.8
1%
Nov 4
Chamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile
Affected: 1.11.26
CVE-2023-4226
8.8
2%
Nov 28
Unrestricted file upload in `/main/inc/ajax/work.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via…
Affected: through 1.11.24
CVE-2023-4225
8.8
2%
Nov 28
Unrestricted file upload in `/main/inc/ajax/exercise.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via…
Affected: through 1.11.24
CVE-2023-4224
8.8
2%
Nov 28
Unrestricted file upload in `/main/inc/ajax/dropbox.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via…
Affected: through 1.11.24
CVE-2023-4223
8.8
2%
Nov 28
Unrestricted file upload in `/main/inc/ajax/document.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via…
Affected: through 1.11.24
CVE-2023-4222
8.8
4%
Nov 28
Command injection in `main/lp/openoffice_text_document.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via…
Affected: through 1.11.24
CVE-2023-4221
8.8
4%
Nov 28
Command injection in `main/lp/openoffice_presentation.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via…
Affected: through 1.11.24
CVE-2022-27426
8.8
1%
Apr 15
A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and execute arbitrary system commands via a crafted Phar file
Affected: 1.11.0 through 1.11.16
CVE-2021-35413
8.8
3%
Dec 3
A remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess…
Affected: 1.11.0 through 1.11.16
CVE-2020-23127
8.8
1%
May 6
Chamilo LMS 1.11.10 is affected by Cross Site Request Forgery (CSRF) via the edit_user function by targeting an admin user
Affected: 1.11.10
CVE-2026-34160
8.6
0%
Apr 14
Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata services
Affected: < 2.0-RC.3
CVE-2026-31939
8.3
0%
Apr 10
Path Traversal (Arbitrary File Delete) in Chamilo LMS
Affected: < 1.11.38
CVE-2025-52482
8.3
0%
Mar 2
Chamilo is a learning management system
Affected: before 1.11.30
CVE-2025-59541
8.1
0%
Mar 6
Chamilo is a learning management system
Affected: before 1.11.34
CVE-2023-34962
8.1
1%
Jun 8
Incorrect access control in Chamilo v1.11.x up to v1.11.18 allows a student to arbitrarily access and modify another student's personal notes
Affected: 1.11.0 through 1.11.18
CVE-2018-20329
8.1
1%
Dec 21
Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue (which may optionally be…
Affected: 1.11.8
CVE-2026-34239
7.5
0%
Jul 20
Chamilo Authenticated Remote Code Execution
Affected: <= 1.11.40
CVE-2026-33710
7.5
0%
Apr 10
Chamilo LMS has Weak REST API Key Generation (Predictable)
Affected: < 1.11.38; >= 2.0.0-alpha.1, < 2.0.0-RC.3
CVE-2024-30619
7.5
0%
Nov 4
Chamilo LMS Version 1.11.26 is vulnerable to Incorrect Access Control
Affected: 1.11.26
Page 1 of 3 · 130 total
123