Security: chamilo/chamilo-lms
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Error-based SQL InjectionGHSA-5296-jxrr-pfwj published
Mar 1, 2026 by ywarnierHigh -
Error-based SQL InjectionGHSA-vxx3-648j-7p4r published
Mar 1, 2026 by ywarnierHigh -
Error-based SQL Injection in Chamilo LMSGHSA-96j3-x45m-9q3r published
Mar 1, 2026 by ywarnierHigh -
Stored XSS in glossary function via /main/glossary/index.php trigger in /main/tracking/course_log_resources.phpGHSA-4wcp-3rh3-7wm4 published
Mar 1, 2026 by ywarnierHigh -
Evaluation of untrusted user input leads to Remote Code ExecutionGHSA-356v-7xg2-3678 published
Mar 1, 2026 by ywarnierCritical -
Potential unauthenticated blind SSRF via openid functionGHSA-rp2w-g734-jf8h published
Mar 1, 2026 by ywarnierModerate -
Chamilo 1.11.26 - Post-Auth Remote Code ExecutionGHSA-c4fc-vjm9-9mvc published
Mar 1, 2026 by ywarnierHigh