Description
Chamilo before 1.8.8.6 does not adequately handle user supplied input by the index.php script, which could allow remote attackers to delete arbitrary files.
References
- 78054 vdb-entry
Published Jan 10, 2020 · Updated Aug 6, 2024 · Assigned by mitre
Chamilo before 1.8.8.6 does not adequately handle user supplied input by the index.php script, which could allow remote attackers to delete arbitrary files.