Vulnerability index

Browse CVEs

127 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Chamilo Lms MEDIUM 6.5
CVE-2019-1000017

Chamilo Chamilo-lms version 1.11.8 and earlier contains an Incorrect Access Control vulnerability in Tickets component that can result in an authenti…

Fix: after 1.11.8
Fix from $1,600 2019-02-04
Chamilo Lms MEDIUM 6.1
CVE-2019-1000015

Chamilo Chamilo-lms version 1.11.8 and earlier contains a Cross Site Scripting (XSS) vulnerability in main/messages/new_message.php, main/social/pers…

Fix: after 1.11.8
Fix from $1,600 2019-02-04
Chamilo Lms HIGH 8.1
CVE-2018-20329

Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions cata…

Patch available
Fix from $1,950 2018-12-21
Chamilo Lms MEDIUM 5.4
CVE-2018-20327

Chamilo LMS version 1.11.8 contains XSS in main/template/default/admin/gradebook_list.tpl in the gradebook dependencies tool, allowing authenticated …

Patch available
Fix from $1,600 2018-12-21
Chamilo Lms MEDIUM 5.4
CVE-2018-20328

Chamilo LMS version 1.11.8 contains XSS in main/social/group_view.php in the social groups tool, allowing authenticated users to affect other users, …

Patch available
Fix from $1,600 2018-12-21
Chamilo Lms CRITICAL 9.8
CVE-2018-1999019

Chamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter for the api endpoint located at /webservices/api/v2.ph…

Patch available
Fix from $2,300 2018-07-23
Chamilo Lms MEDIUM 6.0
CVE-2013-6787

SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earlier, when using the non-encrypt…

Fix: after 1.9.6
Fix from $1,600 2013-12-05