Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2020-23126
Disclosure Date: November 03, 2021 (last updated February 23, 2025)
Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/herself and social network friends.
0
Attacker Value
Unknown
CVE-2020-23128
Disclosure Date: May 06, 2021 (last updated February 22, 2025)
Chamilo LMS 1.11.10 does not properly manage privileges which could allow a user with Sessions administrator privilege to create a new user then use the edit user function to change this new user to administrator privilege.
0
Attacker Value
Unknown
CVE-2020-23127
Disclosure Date: May 06, 2021 (last updated February 22, 2025)
Chamilo LMS 1.11.10 is affected by Cross Site Request Forgery (CSRF) via the edit_user function by targeting an admin user.
0
