Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: chamilo-lms Clear
ID Title
CVE-2026-40291 Privilege Escalation in chamilo (CVE-2026-40291)
vulnerability in chamilo (CVE-2026-40291). Successful exploitation can lead to full system takeover. Exploitable via `PUT /api/users/{id}`.
CVE-2026-35196 OS Command Injection in chamilo (CVE-2026-35196)
OS command injection in chamilo (CVE-2026-35196). Successful exploitation can lead to full system takeover.
CVE-2026-34602 Vulnerability in chamilo (CVE-2026-34602)
vulnerability in chamilo (CVE-2026-34602). Data can be tampered with by attackers.
CVE-2026-34370 Vulnerability in chamilo (CVE-2026-34370)
vulnerability in chamilo (CVE-2026-34370). Confidential information can be exposed externally.
CVE-2026-34161 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2026-34161)
cross-site scripting in privilege-escalation (CVE-2026-34161). Risk of unauthorized operations or information disclosure.
CVE-2026-34160 Vulnerability in ssrf (CVE-2026-34160)
vulnerability in ssrf (CVE-2026-34160). Confidential information can be exposed externally.
CVE-2026-33715 Vulnerability in symfony (CVE-2026-33715)
vulnerability in symfony (CVE-2026-33715). Risk of unauthorized operations or information disclosure.
CVE-2026-33714 SQL Injection in sqli (CVE-2026-33714)
SQL injection in sqli (CVE-2026-33714). Successful exploitation can lead to full system takeover.
CVE-2023-34944 Unrestricted File Upload in chamilo (CVE-2023-34944)
vulnerability in chamilo (CVE-2023-34944). Successful exploitation can lead to full system takeover.
CVE-2023-31807 Cross-Site Scripting (XSS) in chamilo (CVE-2023-31807)
cross-site scripting in chamilo (CVE-2023-31807). Risk of unauthorized operations or information disclosure.
CVE-2023-31806 Cross-Site Scripting (XSS) in chamilo (CVE-2023-31806)
cross-site scripting in chamilo (CVE-2023-31806). Risk of unauthorized operations or information disclosure.
CVE-2023-31805 Cross-Site Scripting (XSS) in chamilo (CVE-2023-31805)
cross-site scripting in chamilo (CVE-2023-31805). Risk of unauthorized operations or information disclosure.
CVE-2023-31799 Cross-Site Scripting (XSS) in chamilo (CVE-2023-31799)
cross-site scripting in chamilo (CVE-2023-31799). Risk of unauthorized operations or information disclosure.
CVE-2023-31804 Cross-Site Scripting (XSS) in chamilo (CVE-2023-31804)
cross-site scripting in chamilo (CVE-2023-31804). Risk of unauthorized operations or information disclosure.
CVE-2023-31803 Cross-Site Scripting (XSS) in chamilo (CVE-2023-31803)
cross-site scripting in chamilo (CVE-2023-31803). Risk of unauthorized operations or information disclosure.
CVE-2023-31802 Cross-Site Scripting (XSS) in chamilo (CVE-2023-31802)
cross-site scripting in chamilo (CVE-2023-31802). Risk of unauthorized operations or information disclosure.
CVE-2023-31801 Cross-Site Scripting (XSS) in chamilo (CVE-2023-31801)
cross-site scripting in chamilo (CVE-2023-31801). Risk of unauthorized operations or information disclosure.
CVE-2023-31800 Cross-Site Scripting (XSS) in chamilo (CVE-2023-31800)
cross-site scripting in chamilo (CVE-2023-31800). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →