← Back

Chamilo Lms

chamilo_lms

Vendor: Chamilo • 122 CVEs

CVEs (122)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-1999019
1Chamilo
1Chamilo Lms
Nov 21, 2024
Jul 23, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Chamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter for the api endpoint located at /webservices/api/v2.php that can result in Unauthenticated remote code execution. This attack...Show more
Chamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter for the api endpoint located at /webservices/api/v2.php that can result in Unauthenticated remote code execution. This attack appear to be exploitable via a simple GET request to the api endpoint. This vulnerability appears to have been fixed in After commit 0de84700648f098c1fbf6b807dee28ec640efe62.Show less
CVE-2013-6787
1Chamilo
1Chamilo Lms
Apr 29, 2026
Dec 5, 2013
N/A· v4
N/A· v3
6.0 MEDIUM· v2
SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earlier, when using the non-encrypted passwords mode set at installation, allows remote authenticated user...Show more
SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earlier, when using the non-encrypted passwords mode set at installation, allows remote authenticated users to execute arbitrary SQL commands via the "password0" parameter.Show less