Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

chamilo-lms — Vulnerabilities & Security Advisories 69

All 69 CVE vulnerabilities found in chamilo-lms, with AI-generated Chinese analysis, references, and POCs.

Vendor: chamilo

CVE IDTitleCVSSSeverityPublished
CVE-2025-50191 Chamilo: Error-based SQL Injection via POST userFile with the /main/exercise/hotpotatoes.php script CWE-89 9.8AICriticalAI2026-03-02
CVE-2025-50190 Chamilo: Error-based SQL Injection via GET openid.assoc_handle with the /index.php script CWE-89 9.8AICriticalAI2026-03-02
CVE-2025-50189 Chamilo: Error-based SQL Injection CWE-89 9.8AICriticalAI2026-03-02
CVE-2025-50188 Error-based SQL Injection in Chamilo LMS CWE-89 9.8AICriticalAI2026-03-02
CVE-2025-52482 Chamilo: Stored XSS in glossary function via /main/glossary/index.php trigger in /main/tracking/course_log_resources.php CWE-79 8.3 High2026-03-02
CVE-2025-50187 Chamilo: Evaluation of untrusted user input leads to Remote Code Execution CWE-95 9.8 Critical2026-03-02
CVE-2025-50186 Chamilo: Stored XSS via Malicious CSV Filename in user_import.php CWE-79 4.8 Medium2026-03-02
CVE-2024-50337 Chamilo: Potential unauthenticated blind SSRF via openid function CWE-918 5.3 Medium2026-03-02
CVE-2024-47886 Chamilo: Post-Auth Remote Code Execution CWE-502 7.2AIHighAI2026-03-02

All 69 known CVE vulnerabilities affecting chamilo-lms with full Chinese analysis, references, and POCs where available.