chamilo

7 results · Clear filters · Feed

• Critical 9.8
  CVE-2026-45140 Public exploit

  Chamilo LMS CStudio upload flow allows unauthenticated remote code execution

  Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote attacker to execute arbitrary code on the server. The authoritative advisory does not identify the affected endpoint, component, input, or e…

  chamilo chamilo-lms chamilo/chamilo-lms Packagist
  Sep 17, 2026
• High 8.8
  CVE-2026-35196 Public exploit

  Chamilo LMS has OS Command Injection via export_all_certificates action

  Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, an OS Command Injection vulnerability exists in the main/inc/ajax/gradebook.ajax.php endpoint within the export_all_certificates action, where the course code retrieved…

  chamilo chamilo-lms
  Apr 14, 2026
• High 8.6
  CVE-2026-34160 Public exploit

  Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata services

  Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, the PENS (Package Exchange Notification Services) plugin endpoint at public/plugin/Pens/pens.php is accessible without authentication and accepts a user-controlled pack…

  chamilo chamilo-lms
  Apr 14, 2026
• High 7.2
  CVE-2026-33715 Public exploit

  Chamilo LMS has Unauthenticated SSRF and Open Email Relay via install.ajax.php test_mailer action

  Chamilo LMS is an open-source learning management system. In version 2.0-RC.2, the file public/main/inc/ajax/install.ajax.php is accessible without authentication on fully installed instances because, unlike other AJAX endpoints, it does not include the globa…

  chamilo chamilo-lms
  Apr 14, 2026
• High 8.8
  CVE-2026-29041 Public exploit

  Chamilo: Authenticated Remote Code Execution via Unrestricted File Upload

  Chamilo is a learning management system. Prior to version 1.11.34, Chamilo LMS is affected by an authenticated remote code execution vulnerability caused by improper validation of uploaded files. The application relies solely on MIME-type verification when ha…

  chamilo chamilo-lms
  Mar 6, 2026
• High 8.8
  CVE-2023-4226 Public exploit

  Chamilo LMS File Upload Functionality Remote Code Execution

  Unrestricted file upload in `/main/inc/ajax/work.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.

  chamilo Chamilo
  Nov 28, 2023
• High 8.1
  CVE-2023-4220 Public exploit EPSS 76%

  Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

  Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via…

  chamilo Chamilo
  Nov 28, 2023