Chamilo LMS 1.11.26
Approved changes feed: RSS · Atom
cpe:2.3:a:chamilo:chamilo_lms:1.11.26:-:*:*:*:*:*:*
part: a version: 1.11.26 update: -
| Vendor | Chamilo (d67c89f9-ec6c-5c0f-80cd-05fcfd92387d) |
|---|---|
| Product | Chamilo Lms (a111a9ef-7743-514c-9704-c911aadccec3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/chamilo/chamilo-lms |
purl2cpe | 2026-06-01 10:16:30.316866 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-51142 |
vulnerable | 2026-06-08 06:52:11.797062 |
Details available
Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute arbitrary code via the svkey parameter of the storageapi.php file.
Published: 2024-11-15T00:00:00.000Z
Updated: 2024-11-15T18:52:11.685Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30619 |
vulnerable | 2026-06-08 06:35:30.617144 |
Details available
Chamilo LMS Version 1.11.26 is vulnerable to Incorrect Access Control. A non-authenticated attacker can request the number of messages and the number of online users via "/main/inc/ajax/message.ajax.php?a=get_count_message" AND "/main/inc/ajax/online.ajax.php?a=get_users_online."
Published: 2024-11-04T00:00:00.000Z
Updated: 2024-11-05T17:34:18.309Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30618 |
vulnerable | 2026-06-08 06:35:30.616630 |
Details available
A Stored Cross-Site Scripting (XSS) Vulnerability in Chamilo LMS 1.11.26 allows a remote attacker to execute arbitrary JavaScript in a web browser by including a malicious payload in the 'content' parameter of 'group_topics.php'.
Published: 2024-11-04T00:00:00.000Z
Updated: 2024-11-05T17:35:55.997Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30617 |
vulnerable | 2026-06-08 06:35:30.616035 |
Details available
A Cross-Site Request Forgery (CSRF) vulnerability in Chamilo LMS 1.11.26 "/main/social/home.php," allows attackers to initiate a request that posts a fake post onto the user's social wall without their consent or knowledge.
Published: 2024-11-04T00:00:00.000Z
Updated: 2024-11-05T18:46:25.478Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30616 |
vulnerable | 2026-06-08 06:35:30.615409 |
Details available
Chamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile. Non-admin users can manipulate sensitive profiles information, posing a significant risk to data integrity.
Published: 2024-11-04T00:00:00.000Z
Updated: 2024-11-05T18:51:07.914Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27525 |
vulnerable | 2026-06-08 06:31:29.020958 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27524 |
vulnerable | 2026-06-08 06:31:29.020385 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.