Skip to content
OpenAdvisories
High · 7.1 CVE-2025-50193 EUVD-2025-208162

Chamilo: OS command Injection in /plugin/vchamilo/views/import.php with the POST to_main_database parameter

Published Mar 2, 2026 · Updated Mar 2, 2026 · Assigned by GitHub_M

Description

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS command Injection vulnerability in /plugin/vchamilo/views/import.php with the POST to_main_database parameter. This issue has been patched in version 1.11.30.

Affected products

VendorProductAffectedFixed
chamilo chamilo-lms < 1.11.30 —

References