CVE-2025-69581 PoC — Chamilo LMS 安全漏洞

Source

https://github.com/Rivek619/CVE-2025-69581

Associated Vulnerability

Title:Chamilo LMS 安全漏洞 (CVE-2025-69581)
Description:Chamilo LMS是Chamilo开源的一套开源的在线学习和协作系统。该系统支持创建教学内容、远程培训和在线答题等。 Chamilo LMS 1.11.2版本存在安全漏洞，该漏洞源于缺少适当的缓存控制，可能导致用户敏感信息泄露，进而引发仿冒、针对性攻击和重大隐私风险。

Description

 An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personal_data endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Discovered by - Rivek Raj Tamang (RivuDon), Sikkim, India.

File Snapshot


 None

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!