chamilo
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 153 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 5, 2013 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Chamilo LMS Stored XSS via Survey Answer Submission in reporting.php
Chamilo Authenticated Remote Code Execution
Chamilo stored XSS via user registration leads to admin account takeover
Chamilo LMS has Privilege Escalation via API User Role Modification
Chamilo LMS has OS Command Injection via export_all_certificates action
Chamilo LMS: IDOR in /api/course_rel_users Allows Unauthorized Enrollment of Arbitrary Users into Courses
Chamilo LMS: IDOR in the Notebook Module allows an attacker to view other users' private notes
Chamilo LMS: Stored XSS via Malicious File Upload in Social Post Attachments Leads to Arbitrary JavaScript Execution
Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata services
Chamilo LMS has Unauthenticated SSRF and Open Email Relay via install.ajax.php test_mailer action
Monitor chamilo in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.