Skip to content
OpenAdvisories

Vendor

chamilo

97 known vulnerabilities.

Products

chamilo-lms 82 Chamilo 12 LMS 2 Chamillo LMS 1
All Critical High Medium Low Exploited only Public exploit

97 results · Feed

  • Medium 4.8
    CVE-2025-50186

    Chamilo: Stored XSS via Malicious CSV Filename in user_import.php

    Chamilo is a learning management system. Prior to version 1.11.30, a stored cross-site scripting (XSS) vulnerability exists due to insufficient sanitization of CSV filenames. An attacker can upload a maliciously named CSV file (e.g., <img src=q onerror=prompt…

    chamilo chamilo-lms
  • Medium 5.3
    CVE-2024-50337

    Chamilo: Potential unauthenticated blind SSRF via openid function

    Chamilo is a learning management system. Prior to version 1.11.28, the OpenId function allows anyone to send requests to any URL on server's behalf, which results in unauthenticated blind SSRF. This issue has been patched in version 1.11.28.

    chamilo chamilo-lms
  • High 8.7
    CVE-2024-47886

    Chamilo: Post-Auth Remote Code Execution

    Chamilo is a learning management system. Chamillo is affected by a post-authentication phar unserialize which leads to a remote code execution (RCE) within versions 1.11.12 to 1.11.26. By abusing multiple supported features from the virtualization plugin vcha…

    chamilo chamilo-lms
  • High 8.8
    CVE-2018-25158

    Chamilo LMS 1.11.8 Arbitrary File Upload via elfinder

    Chamilo LMS 1.11.8 contains an arbitrary file upload vulnerability that allows authenticated users to upload and execute PHP files through the elfinder filemanager module. Attackers can upload files with image headers in the social myfiles section, rename the…

    chamilo Chamillo LMS
  • Medium 5.4
    CVE-2026-1106

    Chamilo LMS Legal Consent SocialController.php deleteLegal improper authorization

    A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of the file src/CoreBundle/Controller/SocialController.php of the component Legal Consent Handler. Performing a manipulation of the argument use…

    chamilo LMS
  • High 8.8
    CVE-2023-4225

    Chamilo LMS File Upload Functionality Remote Code Execution

    Unrestricted file upload in `/main/inc/ajax/exercise.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.

    chamilo Chamilo
  • High 8.8
    CVE-2023-4226 Public exploit

    Chamilo LMS File Upload Functionality Remote Code Execution

    Unrestricted file upload in `/main/inc/ajax/work.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.

    chamilo Chamilo
  • High 8.8
    CVE-2023-4224

    Chamilo LMS File Upload Functionality Remote Code Execution

    Unrestricted file upload in `/main/inc/ajax/dropbox.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.

    chamilo Chamilo
  • High 8.8
    CVE-2023-4223

    Chamilo LMS File Upload Functionality Remote Code Execution

    Unrestricted file upload in `/main/inc/ajax/document.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.

    chamilo Chamilo
  • High 7.2
    CVE-2023-4222

    Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability

    Command injection in `main/lp/openoffice_text_document.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters.

    chamilo Chamilo
  • High 7.2
    CVE-2023-4221

    Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability

    Command injection in `main/lp/openoffice_presentation.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters.

    chamilo Chamilo
  • High 8.1
    CVE-2023-4220 Public exploit EPSS 76%

    Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

    Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via…

    chamilo Chamilo
  • Critical 9.8
    CVE-2023-3545

    Chamilo LMS Htaccess File Upload Security Bypass

    Improper sanitisation in `main/inc/lib/fileUpload.lib.php` in Chamilo LMS <= v1.11.20 on Windows and Apache installations allows unauthenticated attackers to bypass file upload security protections and obtain remote code execution via uploading of `.htaccess`…

    chamilo Chamilo
  • Critical 9.8
    CVE-2023-3533

    Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write

    Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via arbitrary file write.

    chamilo Chamilo
  • Critical 9.8
    CVE-2023-3368 EPSS 70%

    Chamilo LMS Unauthenticated Command Injection

    Command injection in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. This is a bypass of CVE-2023-34960.

    chamilo Chamilo
  • Unscored —
    CVE-2013-0739

    Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script.

    chamilo Chamilo
  • Unscored —
    CVE-2013-0738

    Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php.

    chamilo Chamilo