Chamilo Lms
Approved changes feed: RSS · Atom
cpe:2.3:a:chamilo:chamilo_lms:1.11.8:*:*:*:*:*:*:*
part: a version: 1.11.8 update: *
| Vendor | Chamilo (d67c89f9-ec6c-5c0f-80cd-05fcfd92387d) |
|---|---|
| Product | Chamilo Lms (a111a9ef-7743-514c-9704-c911aadccec3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-20329 |
vulnerable | 2026-06-08 05:11:26.949636 |
Details available
Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue (which may optionally be made public) to extract and/or modify database information.
Published: 2018-12-21T06:00:00.000Z
Updated: 2024-08-05T11:58:18.715Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20328 |
vulnerable | 2026-06-08 05:11:26.949296 |
Details available
Chamilo LMS version 1.11.8 contains XSS in main/social/group_view.php in the social groups tool, allowing authenticated users to affect other users, under specific conditions of permissions granted by administrators. This is considered "low risk" due to the nature of the feature it exploits.
Published: 2018-12-21T06:00:00.000Z
Updated: 2024-08-05T11:58:18.418Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20327 |
vulnerable | 2026-06-08 05:11:26.948634 |
Details available
Chamilo LMS version 1.11.8 contains XSS in main/template/default/admin/gradebook_list.tpl in the gradebook dependencies tool, allowing authenticated users to affect other users, under specific conditions of permissions granted by administrators. This is considered "low risk" due to the nature of the feature it exploits.
Published: 2018-12-21T06:00:00.000Z
Updated: 2024-08-05T11:58:18.927Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.