CChamilo

Products

Exploited and recent CVEs

• CVE-2026-45146 High 7.2 Chamilo LMS: Blind SQL Injection in model.ajax.php via filters[groupOp] authentificated 0.3%
• CVE-2026-44344 Medium 6.6 Chamilo LMS: Conditional PHP execution through vendored QuickForm eval 0.3%
• CVE-2026-45141 Medium 6.5 Chamilo LMS: CSRF in destructive skill-management AJAX actions 0.2%
• CVE-2026-45145 High 7.5 Chamilo LMS: Database-backed PHP object injection in career deserialization 0.4%
• CVE-2026-45144 High 8.9 Chamilo LMS: Stored XSS in public user-profile fields 0.2%
• CVE-2026-114390 Medium 5.3 Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization in AJAX Handlers 0.2%
• CVE-2026-114389 Medium 4.3 Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authorization via openAnswerGrade 0.3%
• CVE-2026-114388 Medium 5.3 Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookController 0.2%
• CVE-2026-112031 Low 3.5 Chamilo LMS Ticket TicketManager.php addProject cross site scripting 0.3%
• CVE-2026-45140 Critical 9.8 Chamilo LMS CStudio upload flow allows unauthenticated remote code execution 1.3%
• CVE-2026-45143 Critical 9.0 Chamilo LMS: Student-to-admin stored XSS in private messages via v-html 0.5%
• CVE-2026-82535 Medium 6.1 Chamilo LMS Stored XSS via Survey Answer Submission in reporting.php 0.5%
• CVE-2026-34239 High 7.5 Chamilo Authenticated Remote Code Execution 0.5%
• CVE-2026-39878 Critical 9.3 Chamilo stored XSS via user registration leads to admin account takeover 0.4%
• CVE-2026-40291 High 8.8 Chamilo LMS has Privilege Escalation via API User Role Modification 0.3%
• CVE-2026-35196 High 8.8 Chamilo LMS has OS Command Injection via export_all_certificates action 1.8%
• CVE-2026-34602 High 7.1 Chamilo LMS: IDOR in /api/course_rel_users Allows Unauthorized Enrollment of Arbitrary Users into Courses 0.2%
• CVE-2026-34370 Medium 6.5 Chamilo LMS: IDOR in the Notebook Module allows an attacker to view other users' private notes 0.2%
• CVE-2026-34161 Medium 5.1 Chamilo LMS: Stored XSS via Malicious File Upload in Social Post Attachments Leads to Arbitrary JavaScript Execution 0.2%
• CVE-2026-34160 High 8.6 Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata services 0.3%
• CVE-2026-33715 High 7.2 Chamilo LMS has Unauthenticated SSRF and Open Email Relay via install.ajax.php test_mailer action 0.2%
• CVE-2026-33714 High 7.1 Chamilo LMS has Authenticated SQL Injection in statistics.ajax.php users_active action (2.0 RC2) 0.3%
• CVE-2026-33737 Medium 5.3 Chamilo LMS has an XML External Entity (XXE) Injection 0.2%
• CVE-2026-33736 Medium 6.5 Chamilo LMS has an Insecure Direct Object Reference (IDOR) - User Data Exposure 0.2%
• CVE-2026-33710 High 7.5 Chamilo LMS has Weak REST API Key Generation (Predictable) 0.3%
• CVE-2026-33708 Medium 6.5 Chamilo LMS has REST API PII Exposure via get_user_info_from_username 0.2%
• CVE-2026-33707 Critical 9.4 Weak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms 0.4%
• CVE-2026-33706 High 7.1 Chamilo LMS has a REST API Self-Privilege Escalation (Student → Teacher) 0.2%
• CVE-2026-33705 Medium 5.3 Chamilo LMS has unauthenticated access to Twig template source files exposes application logic 0.2%
• CVE-2026-33704 High 7.1 Chamilo LMS Affected by Authenticated Arbitrary File Write via BigUpload endpoint 0.4%