Show filters
71 Total Results
Displaying 31-40 of 71
Sort by:
Attacker Value
Unknown
CVE-2023-31802
Disclosure Date: May 09, 2023 (last updated October 08, 2023)
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the skype and linedin_url parameters.
0
Attacker Value
Unknown
CVE-2023-31801
Disclosure Date: May 09, 2023 (last updated October 08, 2023)
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the skills wheel parameter.
0
Attacker Value
Unknown
CVE-2023-31800
Disclosure Date: May 09, 2023 (last updated October 08, 2023)
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the forum title parameter.
0
Attacker Value
Unknown
CVE-2023-31799
Disclosure Date: May 09, 2023 (last updated October 08, 2023)
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the system annnouncements parameter.
0
Attacker Value
Unknown
CVE-2022-42029
Disclosure Date: October 17, 2022 (last updated October 08, 2023)
Chamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with access to 'big file uploads' to copy/move files from anywhere in the file system into the web directory.
0
Attacker Value
Unknown
CVE-2022-40407
Disclosure Date: September 29, 2022 (last updated October 08, 2023)
A zip slip vulnerability in the file upload function of Chamilo v1.11 allows attackers to execute arbitrary code via a crafted Zip file.
0
Attacker Value
Unknown
CVE-2022-27426
Disclosure Date: April 15, 2022 (last updated October 07, 2023)
A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and execute arbitrary system commands via a crafted Phar file.
0
Attacker Value
Unknown
CVE-2022-27425
Disclosure Date: April 15, 2022 (last updated October 07, 2023)
Chamilo LMS v1.11.13 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /blog/blog.php.
0
Attacker Value
Unknown
CVE-2022-27423
Disclosure Date: April 15, 2022 (last updated October 07, 2023)
Chamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blog_id parameter at /blog/blog.php.
0
Attacker Value
Unknown
CVE-2022-27422
Disclosure Date: April 15, 2022 (last updated October 07, 2023)
A reflected cross-site scripting (XSS) vulnerability in Chamilo LMS v1.11.13 allows attackers to execute arbitrary web scripts or HTML via user interaction with a crafted URL.
0
