Search Results (163 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2013-0738 1 Chamilo 1 Chamilo 2024-11-21 6.1 Medium
Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php.
CVE-2012-4030 1 Chamilo 1 Chamilo Lms 2024-11-21 7.5 High
Chamilo before 1.8.8.6 does not adequately handle user supplied input by the index.php script, which could allow remote attackers to delete arbitrary files.
CVE-2012-4029 1 Chamilo 1 Chamilo 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in main/dropbox/index.php in Chamilo LMS before 1.8.8.6 allows remote attackers to inject arbitrary web script or HTML via the category_name parameter in an addsentcategory action.