Login Request a demo
CH
Product
Chamilo
by Chamilo · last CVE Nov 28, 2023
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities26In the news0Timeline
Severity mix
Critical 5High 4Medium 16Low 1
Severity
All severities26Critical5High4Medium16Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Chamilo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-38745
6.8
1%
Mar 21
Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execute arbitrary code via a crafted plugin
Affected: 1.11.14
CVE-2021-32925
6.5
2%
May 13
admin/user_import.php in Chamilo 1.11.x reads XML data without disabling the ability to load external entities
Affected: 1.11.0 through 1.11.16
CVE-2022-27425
6.1
1%
Apr 15
Chamilo LMS v1.11.13 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /blog/blog.php
Affected: 1.11.0 through 1.11.16
CVE-2021-43687
6.1
1%
Dec 1
chamilo-lms v1.11.14 is affected by a Cross Site Scripting (XSS) vulnerability in /plugin/jcapture/applet.php if an attacker passes a message hex2bin in the cookie
Affected: 1.11.14
CVE-2021-37389
6.1
1%
Aug 10
Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter
Affected: 1.11.14
CVE-2021-26746
6.1
1%
Feb 19
Chamilo 1.11.14 allows XSS via a main/calendar/agenda_list.php?type= URI
Affected: 1.11.14
CVE-2012-4029
6.1
1%
Feb 8
Cross-site scripting (XSS) vulnerability in main/dropbox/index.php in Chamilo LMS before 1.8.8.6 allows remote attackers to inject arbitrary web script or HTML via the…
Affected: before 1.8.8.6
CVE-2013-0739
6.1
1%
Jan 30
Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script
Affected: 1.9.4
CVE-2013-0738
6.1
1%
Jan 30
Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php
Affected: 1.9.4
CVE-2023-37067
4.8
0%
Jul 7
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the classes/usergroups management section
Affected: 1.11.0 through 1.11.20
CVE-2023-37066
4.8
0%
Jul 7
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the skills wheel
Affected: 1.11.0 through 1.11.20
CVE-2023-37065
4.8
0%
Jul 7
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the session category management section
Affected: 1.11.0 through 1.11.20
CVE-2023-37064
4.8
0%
Jul 7
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the extra fields management section
Affected: 1.11.0 through 1.11.20
CVE-2023-37063
4.8
0%
Jul 7
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the careers & promotions management section
Affected: 1.11.0 through 1.11.20
CVE-2023-37062
4.8
0%
Jul 7
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the course categories' definition
Affected: 1.11.0 through 1.11.20
CVE-2023-37061
4.8
0%
Jul 7
Chamilo 1.11.x up to 1.11.20 allows users with an admin privilege account to insert XSS in the languages management section
Affected: 1.11.0 through 1.11.20
Showing 16