Chamilo

2 Products 18 CVEs

CVE Severity Distribution (All Time)

Critical

High

Medium

Low

Timeline Overview

Last 30 Days 0 CVEs

Last 6 Months 0 CVEs

Last Year 6 CVEs

Products

View all

Chamilo

4 Versions 12 CVEs

chamilo_lms

3 Versions 6 CVEs

Recent CVEs

View all

CVE-2024-30617 MEDIUM 8 months, 3 weeks ago

A Cross-Site Request Forgery (CSRF) vulnerability in Chamilo LMS 1.11.26 "/main/social/home.php," allows attackers to initiate a request that posts a…

CVE-2024-30618 MEDIUM 8 months, 3 weeks ago

A Stored Cross-Site Scripting (XSS) Vulnerability in Chamilo LMS 1.11.26 allows a remote attacker to execute arbitrary JavaScript in a web browser by…

CVE-2024-30616 HIGH 8 months, 3 weeks ago

Chamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile. Non-admin users can manipulate sensitive profiles information, p…

CVE-2024-30619 HIGH 8 months, 3 weeks ago

Chamilo LMS Version 1.11.26 is vulnerable to Incorrect Access Control. A non-authenticated attacker can request the number of messages and the number…

CVE-2024-27524 HIGH 8 months, 3 weeks ago

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename para…

CVE-2024-27525 MEDIUM 8 months, 3 weeks ago

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename para…