Search Results (162 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2012-4030 1 Chamilo 1 Chamilo Lms 2024-11-21 7.5 High
Chamilo before 1.8.8.6 does not adequately handle user supplied input by the index.php script, which could allow remote attackers to delete arbitrary files.
CVE-2012-4029 1 Chamilo 1 Chamilo 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in main/dropbox/index.php in Chamilo LMS before 1.8.8.6 allows remote attackers to inject arbitrary web script or HTML via the category_name parameter in an addsentcategory action.