Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Advisory: Chamilo — support.chamilo.org/projects/chamilo-18/wiki/security_issues Clear all filters
TI-2023-03912 CVE-2023-4225 · GHSA-w8qr-ppgq-rx7q

Chamilo LMS File Upload Functionality Remote Code Execution

Priority MEDIUM 48

Unrestricted file upload in `/main/inc/ajax/exercise.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0183 Published 2023-11-28 No fix listed CWE-434
TI-2023-03913 CVE-2023-4226 · GHSA-wvpw-59rx-prc9

Chamilo LMS File Upload Functionality Remote Code Execution

Priority MEDIUM 43

Unrestricted file upload in `/main/inc/ajax/work.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02453 Published 2023-11-28 No fix listed CWE-434
TI-2023-03911 CVE-2023-4224 · GHSA-rwf6-g8j5-7gvq

Chamilo LMS File Upload Functionality Remote Code Execution

Priority MEDIUM 42

Unrestricted file upload in `/main/inc/ajax/dropbox.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01828 Published 2023-11-28 No fix listed CWE-434
TI-2023-03910 CVE-2023-4223 · GHSA-73v5-4v68-mjjx

Chamilo LMS File Upload Functionality Remote Code Execution

Priority HIGH 73

Unrestricted file upload in `/main/inc/ajax/document.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0183 Published 2023-11-28 No fix listed CWE-434
TI-2023-03909 CVE-2023-4222 · GHSA-8vfp-9vjm-2mhr

Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability

Priority MEDIUM 44

Command injection in `main/lp/openoffice_text_document.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characte…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03528 Published 2023-11-28 No fix listed CWE-78
TI-2023-03908 CVE-2023-4221 · GHSA-jfvr-vp65-vw72

Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability

Priority MEDIUM 44

Command injection in `main/lp/openoffice_presentation.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special character…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03528 Published 2023-11-28 No fix listed CWE-78
TI-2023-03907 CVE-2023-4220 · GHSA-9wc2-3gq5-2f4c

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

Priority HIGH 74

Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attac…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.76084 Published 2023-11-28 No fix listed CWE-434
TI-2023-03309 CVE-2023-3545 · GHSA-qrrc-369r-8grr

Chamilo LMS Htaccess File Upload Security Bypass

Priority MEDIUM 47

Improper sanitisation in `main/inc/lib/fileUpload.lib.php` in Chamilo LMS <= v1.11.20 on Windows and Apache installations allows unauthenticated attackers to bypass file upload security protections and obtain remote code…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02438 Published 2023-11-28 No fix listed CWE-178
TI-2023-03297 CVE-2023-3533 · GHSA-28gg-m25v-q74w

Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write

Priority MEDIUM 48

Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03496 Published 2023-11-28 No fix listed CWE-22
TI-2023-03150 CVE-2023-3368 · GHSA-x9xc-jg9p-2j7f

Chamilo LMS Unauthenticated Command Injection

Priority CRITICAL 86

Command injection in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.69671 Published 2023-11-28 No fix listed CWE-78