Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Chamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter for the api endpoint located at /webservices/api/v2.php that can result in Unauthenticated remote code execution. This attack appear to be exploitable via a simple GET request to the api endpoint. This vulnerability appears to have been fixed in After commit 0de84700648f098c1fbf6b807dee28ec640efe62.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Chamilo LMS 安全漏洞
Vulnerability Description
Chamilo LMS是Chamilo协会开发的一套开源的在线学习和协作系统。该系统支持创建教学内容、远程培训和在线答题等。 Chamilo LMS 11.x版本中的GET参数‘hash’存在反序列化漏洞。远程攻击者可通过向api端点发送一条简单的GET请求利用该漏洞未授权执行代码。
CVSS Information
N/A
Vulnerability Type
N/A