Chamilo chamilo-lms

• CVE-2026-45146 High 7.2 Chamilo LMS: Blind SQL Injection in model.ajax.php via filters[groupOp] authentificated 0.3%
• CVE-2026-44344 Medium 6.6 Chamilo LMS: Conditional PHP execution through vendored QuickForm eval 0.3%
• CVE-2026-45141 Medium 6.5 Chamilo LMS: CSRF in destructive skill-management AJAX actions 0.2%
• CVE-2026-45145 High 7.5 Chamilo LMS: Database-backed PHP object injection in career deserialization 0.4%
• CVE-2026-45144 High 8.9 Chamilo LMS: Stored XSS in public user-profile fields 0.2%
• CVE-2026-114390 Medium 5.3 Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization in AJAX Handlers 0.2%
• CVE-2026-114389 Medium 4.3 Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authorization via openAnswerGrade 0.3%
• CVE-2026-114388 Medium 5.3 Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookController 0.2%
• CVE-2026-45140 Critical 9.8 Chamilo LMS CStudio upload flow allows unauthenticated remote code execution 1.3%
• CVE-2026-45143 Critical 9.0 Chamilo LMS: Student-to-admin stored XSS in private messages via v-html 0.5%
• CVE-2026-82535 Medium 6.1 Chamilo LMS Stored XSS via Survey Answer Submission in reporting.php 0.5%
• CVE-2026-34239 High 7.5 Chamilo Authenticated Remote Code Execution 0.5%
• CVE-2026-39878 Critical 9.3 Chamilo stored XSS via user registration leads to admin account takeover 0.4%
• CVE-2026-40291 High 8.8 Chamilo LMS has Privilege Escalation via API User Role Modification 0.3%
• CVE-2026-35196 High 8.8 Chamilo LMS has OS Command Injection via export_all_certificates action 1.8%
• CVE-2026-34602 High 7.1 Chamilo LMS: IDOR in /api/course_rel_users Allows Unauthorized Enrollment of Arbitrary Users into Courses 0.2%
• CVE-2026-34370 Medium 6.5 Chamilo LMS: IDOR in the Notebook Module allows an attacker to view other users' private notes 0.2%
• CVE-2026-34161 Medium 5.1 Chamilo LMS: Stored XSS via Malicious File Upload in Social Post Attachments Leads to Arbitrary JavaScript Execution 0.2%
• CVE-2026-34160 High 8.6 Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata services 0.3%
• CVE-2026-33715 High 7.2 Chamilo LMS has Unauthenticated SSRF and Open Email Relay via install.ajax.php test_mailer action 0.2%
• CVE-2026-33714 High 7.1 Chamilo LMS has Authenticated SQL Injection in statistics.ajax.php users_active action (2.0 RC2) 0.3%
• CVE-2026-33737 Medium 5.3 Chamilo LMS has an XML External Entity (XXE) Injection 0.2%
• CVE-2026-33736 Medium 6.5 Chamilo LMS has an Insecure Direct Object Reference (IDOR) - User Data Exposure 0.2%
• CVE-2026-33710 High 7.5 Chamilo LMS has Weak REST API Key Generation (Predictable) 0.3%
• CVE-2026-33708 Medium 6.5 Chamilo LMS has REST API PII Exposure via get_user_info_from_username 0.2%
• CVE-2026-33707 Critical 9.4 Weak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms 0.4%
• CVE-2026-33706 High 7.1 Chamilo LMS has a REST API Self-Privilege Escalation (Student → Teacher) 0.2%
• CVE-2026-33705 Medium 5.3 Chamilo LMS has unauthenticated access to Twig template source files exposes application logic 0.2%
• CVE-2026-33704 High 7.1 Chamilo LMS Affected by Authenticated Arbitrary File Write via BigUpload endpoint 0.4%
• CVE-2026-33703 High 7.1 Chamilo LMS Critical IDOR: Any Authenticated User Can Extract All Users’ Personal Data and API Tokens 0.2%
• CVE-2026-33702 High 7.1 Chamilo LMS has an Insecure Direct Object Reference (IDOR) 0.2%
• CVE-2026-33698 Critical 9.3 Chamilo LMS affected by unauthenticated RCE in main/install folder 0.3%
• CVE-2026-33618 High 8.8 Chamilo LMS Affected by Remote Code Execution via eval() in Platform Settings 0.3%
• CVE-2026-33141 Medium 6.5 Chamilo LMS has an IDOR in REST API Stats Endpoint Exposes Any User's Learning Data 0.1%
• CVE-2026-32892 Critical 9.1 OS Command Injection in Chamilo LMS 1.11.36 1.5%
• CVE-2026-32932 Medium 4.7 Chamilo LMS has an Open Redirect via Unvalidated 'page' Parameter in Session Course Edit 0.2%
• CVE-2026-32931 High 7.5 Chamilo LMS has Arbitrary File Upload via MIME-Only Validation in Exercise Sound Upload Leads to RCE 0.5%
• CVE-2026-32930 High 7.1 Chamilo LMS has an IDOR in Gradebook Allows Cross-Course Evaluation Edit Without Ownership Check 0.2%
• CVE-2026-32894 High 7.1 Chamilo LMS has an IDOR in Gradebook Allows Cross-Course Deletion of Any Student's Grade Result 0.3%
• CVE-2026-32893 Medium 5.4 Chamilo LMS has Reflected XSS via Unsanitized http_build_query() in Exercise Question List Pagination 0.1%
• CVE-2026-31941 High 7.7 Server-Side Request Forgery (SSRF) in Chamilo LMS 0.2%
• CVE-2026-31940 High 7.5 Session Fixation in Chamilo LMS 0.2%
• CVE-2026-31939 High 8.3 Path Traversal (Arbitrary File Delete) in Chamilo LMS 0.4%
• CVE-2025-66447 None 0.0 Chamilo LMS has validation-less redirect on login page 0.2%
• CVE-2026-30882 Medium 6.1 Chamilo LMS: Reflected XSS in the session category listing page 0.2%
• CVE-2026-30881 High 8.8 Chamilo LMS: SQL Injection in the statistics AJAX endpoint 0.3%
• CVE-2026-30876 Medium 6.3 Chamilo LMS: User enumeration vulnerability via response 0.2%
• CVE-2026-30875 High 8.8 Chamilo LMS: Authenticated RCE via H5P Import 0.5%
• CVE-2026-28430 Critical 9.3 Chamilo LMS Vulnerable to Unauthenticated SQL Injection in chamiko-lms model.ajax.php 0.3%
• CVE-2026-29041 High 8.8 Chamilo: Authenticated Remote Code Execution via Unrestricted File Upload 0.8%