Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the new_ticket.php component.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Chamilo LMS 安全漏洞
Vulnerability Description
Chamilo LMS是Chamilo协会的一套开源的在线学习和协作系统。该系统支持创建教学内容、远程培训和在线答题等。 Chamilo LMS 1.11.26版本存在安全漏洞,该漏洞源于存在跨站脚本漏洞,远程攻击者通过new_ticket.php组件的filename参数的特制脚本提升权限。
CVSS Information
N/A
Vulnerability Type
N/A