CH
Product
Chamilo
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 4Medium 16Low 1
Watch
Add Chamilo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-3545 | 9.8 | Nov 28 | Improper sanitisation in `main/inc/lib/fileUpload.lib.php` in Chamilo LMS <= v1.11.20 on Windows and Apache installations allows unauthenticated attackers to bypass file upload… Affected: through 1.11.20 |
| CVE-2023-3533 | 9.8 | Nov 28 | Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to perform stored… Affected: through 1.11.20 |
| CVE-2023-3368 | 9.8 | Nov 28 | Command injection in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper… Affected: before 1.11.20 |
| CVE-2023-34960 | 9.8 | Aug 1 | A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted… Affected: 1.11.0 through 1.11.18 |
| CVE-2021-34187 | 9.8 | Jun 28 | main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter Affected: through 1.11.14 |
Showing 5