Skip to content
OpenAdvisories

Product · chamilo

chamilo-lms

82 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

82 results · Feed

  • Medium 5.3
    CVE-2024-50337

    Chamilo: Potential unauthenticated blind SSRF via openid function

    Chamilo is a learning management system. Prior to version 1.11.28, the OpenId function allows anyone to send requests to any URL on server's behalf, which results in unauthenticated blind SSRF. This issue has been patched in version 1.11.28.

    chamilo chamilo-lms
  • High 8.7
    CVE-2024-47886

    Chamilo: Post-Auth Remote Code Execution

    Chamilo is a learning management system. Chamillo is affected by a post-authentication phar unserialize which leads to a remote code execution (RCE) within versions 1.11.12 to 1.11.26. By abusing multiple supported features from the virtualization plugin vcha…

    chamilo chamilo-lms