Skip to content
OpenAdvisories
High · 7.1 CVE-2025-50195 EUVD-2025-208164

Chamilo: OS Command Injection in /plugin/vchamilo/views/manage.controller.php

Published Mar 2, 2026 · Updated Mar 2, 2026 · Assigned by GitHub_M

Description

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/manage.controller.php. This issue has been patched in version 1.11.30.

Affected products

VendorProductAffectedFixed
chamilo chamilo-lms < 1.11.30 —

References