İçeriğe atla
Noroxi

chamilo kayıtları

chamilo üreticisine ait 148 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %1,4
Pre-auth RCE
16
Düzeltme kaydı olan
%46,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

148 kayıt
  • CVE-2023-34960
    69Bu hafta

    A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary comm

    KritikCVSS 9,8SilahlaştırılmışEPSS %99

    chamilo · chamilo31 Tem 2023

  • CVE-2023-3368
    60Bu hafta

    Chamilo LMS Unauthenticated Command Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %70

    chamilo · chamilo28 Kas 2023

  • CVE-2023-4220
    47Planlayın

    Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

    OrtaCVSS 6,1SilahlaştırılmışEPSS %76

    chamilo · chamilo lms28 Kas 2023

  • CVE-2021-34187
    44Planlayın

    main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    chamilo · chamilo28 Haz 2021

  • CVE-2019-13082
    40Planlayın

    Chamilo LMS 1.11.8 and 2.x allows remote code execution through an lp_upload.php unauthenticated file upload feature.

    KritikCVSS 9,8İstismar yokEPSS %4

    chamilo · chamilo lms30 Haz 2019

  • CVE-2023-3533
    40Planlayın

    Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write

    KritikCVSS 9,8İstismar yokEPSS %3

    chamilo · chamilo28 Kas 2023

  • CVE-2018-1999019
    40Planlayın

    Chamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter for the api endpoint located at /webservices/

    KritikCVSS 9,8İstismar yokEPSS %3

    chamilo · chamilo lms23 Tem 2018

  • CVE-2023-3545
    40Planlayın

    Chamilo LMS Htaccess File Upload Security Bypass

    KritikCVSS 9,8İstismar yokEPSS %2

    chamilo · chamilo28 Kas 2023

  • CVE-2021-35414
    40Planlayın

    Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php.

    KritikCVSS 9,8İstismar yokEPSS %2

    chamilo · chamilo lms3 Ara 2021

  • CVE-2023-34944
    39İzleyin

    An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up to v1.11.18 allows attackers to execute arb

    KritikCVSS 9,8İstismar yokEPSS %1

    chamilo · chamilo lms13 Haz 2023

  • CVE-2022-27423
    39İzleyin

    Chamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blog_id parameter at /blog/blog.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    chamilo · chamilo lms15 Nis 2022

  • CVE-2025-50187
    39İzleyin

    Chamilo: Evaluation of untrusted user input leads to Remote Code Execution

    KritikCVSS 9,8İstismar yokEPSS %1

    chamilo · chamilo lms2 Mar 2026

  • CVE-2026-33707
    39İzleyin

    Weak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms

    KritikCVSS 9,8İstismar yokEPSS %1

    chamilo · chamilo lms10 Nis 2026

  • CVE-2026-28430
    37İzleyin

    Chamilo LMS Vulnerable to Unauthenticated SQL Injection in chamiko-lms model.ajax.php

    KritikCVSS 9,3İstismar yokEPSS %1

    chamilo · chamilo lms16 Mar 2026

  • CVE-2026-33698
    37İzleyin

    Chamilo LMS affected by unauthenticated RCE in main/install folder

    KritikCVSS 9,3İstismar yokEPSS %1

    chamilo · chamilo lms10 Nis 2026

  • CVE-2023-4222
    36İzleyin

    Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %4

    chamilo · chamilo lms28 Kas 2023

  • CVE-2023-4221
    36İzleyin

    Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %4

    chamilo · chamilo lms28 Kas 2023

  • CVE-2026-32892
    36İzleyin

    OS Command Injection in Chamilo LMS 1.11.36

    YüksekCVSS 8,8İstismar yokEPSS %3

    chamilo · chamilo lms10 Nis 2026

  • CVE-2026-35196
    36İzleyin

    Chamilo LMS has OS Command Injection via export_all_certificates action

    YüksekCVSS 8,8Kavram kanıtıEPSS %3

    chamilo · chamilo lms14 Nis 2026

  • CVE-2021-35413
    36İzleyin

    A remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x allows authenticated attackers to execute

    YüksekCVSS 8,8İstismar yokEPSS %3

    chamilo · chamilo lms3 Ara 2021

  • CVE-2023-4226
    36İzleyin

    Chamilo LMS File Upload Functionality Remote Code Execution

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    chamilo · chamilo lms28 Kas 2023

  • CVE-2023-4223
    36İzleyin

    Chamilo LMS File Upload Functionality Remote Code Execution

    YüksekCVSS 8,8İstismar yokEPSS %2

    chamilo · chamilo lms28 Kas 2023

  • CVE-2023-4225
    36İzleyin

    Chamilo LMS File Upload Functionality Remote Code Execution

    YüksekCVSS 8,8İstismar yokEPSS %2

    chamilo · chamilo lms28 Kas 2023

  • CVE-2023-4224
    36İzleyin

    Chamilo LMS File Upload Functionality Remote Code Execution

    YüksekCVSS 8,8İstismar yokEPSS %2

    chamilo · chamilo lms28 Kas 2023

  • CVE-2025-55208
    36İzleyin

    Chamilo LMS has Stored Cross Site Scripting on Social Networks Uploaded Files

    KritikCVSS 9,0İstismar yokEPSS %0

    chamilo · chamilo lms5 Mar 2026