Chamilo 1.11.14
Approved changes feed: RSS · Atom
cpe:2.3:a:chamilo:chamilo:1.11.14:-:*:*:*:*:*:*
part: a version: 1.11.14 update: -
| Vendor | Chamilo (d67c89f9-ec6c-5c0f-80cd-05fcfd92387d) |
|---|---|
| Product | Chamilo (d65b9695-42d1-59bc-851d-b9c1cf659e21) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/chamilo/chamilo-lms |
purl2cpe | 2026-06-01 10:16:30.304200 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-43687 |
vulnerable | 2026-06-08 05:36:43.705129 |
Details available
chamilo-lms v1.11.14 is affected by a Cross Site Scripting (XSS) vulnerability in /plugin/jcapture/applet.php if an attacker passes a message hex2bin in the cookie.
Published: 2021-12-01T15:49:46.000Z
Updated: 2026-07-09T00:15:46.926Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40662 |
vulnerable | 2026-06-08 05:35:18.878974 |
Details available
A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted URL.
Published: 2022-03-21T20:39:46.000Z
Updated: 2024-08-04T02:51:06.671Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38745 |
vulnerable | 2026-06-08 05:33:48.372182 |
Details available
Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execute arbitrary code via a crafted plugin. This vulnerability is triggered through user interaction with the attacker's profile page.
Published: 2022-03-21T20:39:45.000Z
Updated: 2024-08-04T01:51:20.146Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.