Chamilo Chamillo LMS vulnerabilities (CVE)

CVE records published for Chamilo Chamillo LMS, newest first. Follow to get an email when a new one appears.

1 results

8.8High

CVE-2018-25158 8 months ago

Chamilo LMS 1.11.8 Arbitrary File Upload via elfinder

Chamilo Chamillo LMS

Chamilo LMS 1.11.8 contains an arbitrary file upload vulnerability that allows authenticated users to upload and execute PHP files through the elfinder filemanager module. Attackers can upload files with image headers in the social myfiles section, rename the…