Vulnerability index

Browse CVEs

127 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Chamilo Lms HIGH 8.8
CVE-2026-30875

Chamilo LMS is a learning management system. Prior to version 1.11.36, an arbitrary file upload vulnerability in the H5P Import feature allows authen…

Fix: 1.11.36+
Fix from $1,950 2026-03-16
Chamilo Lms HIGH 8.8
CVE-2026-30881

Chamilo LMS is a learning management system. Version 1.11.34 and prior contains a SQL Injection vulnerability in the statistics AJAX endpoint. The pa…

Fix: 1.11.36+
Fix from $1,950 2026-03-16
Chamilo Lms MEDIUM 6.1
CVE-2026-30882

Chamilo LMS is a learning management system. Chamilo LMS version 1.11.34 and prior contains a Reflected Cross-Site Scripting (XSS) vulnerability in t…

Fix: 1.11.36+
Fix from $1,600 2026-03-16
Chamilo Lms MEDIUM 5.3
CVE-2026-30876

Chamilo LMS is a learning management system. Prior to version 1.11.36, Chamilo is vulnerable to user enumeration with valid/invalid username. This is…

Fix: 1.11.36+
Fix from $1,600 2026-03-16
Chamilo Lms CRITICAL 9.8
CVE-2026-28430

Chamilo LMS is a learning management system. Prior to version 1.11.34, there is an unauthenticated SQL injection vulnerability which allows remote at…

Fix: 1.11.34+
Fix from $2,300 2026-03-16
Chamilo Lms HIGH 8.8
CVE-2026-29041

Chamilo is a learning management system. Prior to version 1.11.34, Chamilo LMS is affected by an authenticated remote code execution vulnerability ca…

Fix: 1.11.34+
Fix from $1,950 2026-03-06
Chamilo Lms CRITICAL 9.0
CVE-2025-59542

Chamilo is a learning management system. Prior to version 1.11.34, there is a stored cross-site scripting (XSS) vulnerability. By injecting malicious…

Fix: 1.11.34+
Fix from $2,300 2026-03-06
Chamilo Lms CRITICAL 9.0
CVE-2025-59543

Chamilo is a learning management system. Prior to version 1.11.34, there is a stored cross-site scripting (XSS) vulnerability. By injecting malicious…

Fix: 1.11.34+
Fix from $2,300 2026-03-06
Chamilo Lms CRITICAL 9.0
CVE-2025-55289

Chamilo is a learning management system. Prior to version 1.11.34, there is a stored XSS vulnerability in Chamilo LMS (Verison 1.11.32) allows an att…

Fix: 1.11.34+
Fix from $2,300 2026-03-06
Chamilo Lms HIGH 8.1
CVE-2025-59541

Chamilo is a learning management system. Prior to version 1.11.34, a Cross-Site Request Forgery (CSRF) vulnerability allows an attacker to delete pro…

Fix: 1.11.34+
Fix from $1,950 2026-03-06
Chamilo Lms MEDIUM 5.4
CVE-2025-59540

Chamilo is a learning management system. Prior to version 1.11.34, a stored XSS vulnerability exists in Chamilo LMS that allows a staff account to ex…

Fix: 1.11.34+
Fix from $1,600 2026-03-06
Chamilo Lms CRITICAL 9.0
CVE-2025-55208

Chamilo is a learning management system. Versions prior to 1.11.34 have a Stored XSS through insecure file uploads in `Social Networks`. Through it, …

Fix: 1.11.34+
Fix from $2,300 2026-03-05
Chamilo Lms CRITICAL 9.8
CVE-2025-52998

Chamilo is a learning management system. Prior to version 1.11.30, in the application, deserialization of data is performed, the data can be spoofed.…

Fix: 1.11.30+
Fix from $2,300 2026-03-02
Chamilo Lms MEDIUM 6.1
CVE-2025-52564

Chamilo is a learning management system. Prior to version 1.11.30, the open parameter of help.php fails to properly sanitize user input. This allows …

Fix: 1.11.30+
Fix from $1,600 2026-03-02
Chamilo Lms CRITICAL 9.1
CVE-2025-50199

Chamilo is a learning management system. Prior to version 1.11.30, there is a blind SSRF vulnerability in /index.php via the POST openid_url paramete…

Fix: 1.11.30+
Fix from $2,300 2026-03-02
Chamilo Lms HIGH 7.1
CVE-2025-52469

Chamilo is a learning management system. Prior to version 1.11.30, a logic vulnerability in the friend request workflow of Chamilo’s social network m…

Fix: 1.11.30+
Fix from $1,950 2026-03-02
Chamilo Lms MEDIUM 6.1
CVE-2025-52468

Chamilo is a learning management system. Prior to version 1.11.30, an input validation vulnerability exists when importing user data from CSV files. …

Fix: 1.11.30+
Fix from $1,600 2026-03-02
Chamilo Lms MEDIUM 6.1
CVE-2025-52475

Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting (XSS) vulnerability in the admin/user_li…

Fix: 1.11.30+
Fix from $1,600 2026-03-02
Chamilo Lms MEDIUM 6.1
CVE-2025-52476

Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting (XSS) vulnerability due to improper sani…

Fix: 1.11.30+
Fix from $1,600 2026-03-02
Chamilo Lms MEDIUM 6.1
CVE-2025-52563

Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting (XSS) vulnerability due to insufficient …

Fix: 1.11.30+
Fix from $1,600 2026-03-02
Chamilo Lms HIGH 7.2
CVE-2025-50194

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /main/cron/lang/check_parse_lang…

Fix: 1.11.30+
Fix from $1,950 2026-03-02
Chamilo Lms HIGH 7.2
CVE-2025-50195

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/manage.co…

Fix: 1.11.30+
Fix from $1,950 2026-03-02
Chamilo Lms HIGH 7.2
CVE-2025-50196

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/editinsta…

Fix: 1.11.30+
Fix from $1,950 2026-03-02
Chamilo Lms HIGH 7.2
CVE-2025-50197

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /main/admin/sub_language_ajax.in…

Fix: 1.11.30+
Fix from $1,950 2026-03-02
Chamilo Lms HIGH 7.2
CVE-2025-50193

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS command Injection vulnerability in /plugin/vchamilo/views/import.ph…

Fix: 1.11.30+
Fix from $1,950 2026-03-02
Chamilo Lms CRITICAL 9.8
CVE-2025-50187

Chamilo is a learning management system. Prior to version 1.11.28, parameter from SOAP request is evaluated without filtering which leads to Remote C…

Fix: 1.11.28+
Fix from $2,300 2026-03-02
Chamilo Lms CRITICAL 9.8
CVE-2025-50190

Chamilo is a learning management system. Prior to version 1.11.30, there is an error-based SQL Injection via the GET openid.assoc_handle parameter wi…

Fix: 1.11.30+
Fix from $2,300 2026-03-02
Chamilo Lms CRITICAL 9.8
CVE-2025-50192

Chamilo is a learning management system. Prior to version 1.11.30, there is a time-based SQL Injection in found in /main/webservices/registration.soa…

Fix: 1.11.30+
Fix from $2,300 2026-03-02
Chamilo Lms HIGH 8.8
CVE-2025-50189

Chamilo is a learning management system. Prior to version 1.11.30, the application performs insufficient validation of data coming from the user from…

Fix: 1.11.30+
Fix from $1,950 2026-03-02
Chamilo Lms HIGH 8.3
CVE-2025-52482

Chamilo is a learning management system. Prior to version 1.11.30, a Stored XSS vulnerability exists in the glossary function, enabling all users wit…

Fix: 1.11.30+
Fix from $1,950 2026-03-02