Login Request a demo
CH
Product
Chamilo
by Chamilo · last CVE Nov 28, 2023
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities26In the news0Timeline
Severity mix
Critical 5High 4Medium 16Low 1
Severity
All severities26Critical5High4Medium16Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Chamilo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-42029
8.8
1%
Oct 17
Chamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with access to 'big file uploads' to copy/move files from…
Affected: 1.11.16
CVE-2022-40407
8.8
2%
Sep 29
A zip slip vulnerability in the file upload function of Chamilo v1.11 allows attackers to execute arbitrary code via a crafted Zip file
Affected: 1.11
CVE-2021-40662
8.8
1%
Mar 21
A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted URL
Affected: 1.11.14
CVE-2021-31933
7.2
14%
Apr 30
A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a parameter used for file uploads, and improper file-extension…
Affected: through 1.11.14
Showing 4