CVE-2012-4030: Input Validation
Published Jan 10, 2020
·Updated
Chamilo before 1.8.8.6 does not adequately handle user supplied input by the index.php script, which could allow remote attackers to delete arbitrary files.
Affected Software
1 affected component
Chamilo Chamilo LMS<1.8.8.6
Event History
Jan 10, 2020
CVE Published
via MITRE·04:58 PM
Data Sourced
via MITRE·04:58 PM
Description
Frequently Asked Questions
1
What is CVE-2012-4030?
CVE-2012-4030 is a vulnerability in Chamilo LMS before version 1.8.8.6 that allows remote attackers to delete arbitrary files.
2
How does CVE-2012-4030 impact Chamilo before version 1.8.8.6?
CVE-2012-4030 allows remote attackers to delete arbitrary files in Chamilo LMS before version 1.8.8.6.
3
What is the severity of CVE-2012-4030?
The severity of CVE-2012-4030 is high with a score of 7.5.
4
What is the Common Weakness Enumeration (CWE) of CVE-2012-4030?
CVE-2012-4030 has a Common Weakness Enumeration (CWE) of 20.
5
How can I fix the CVE-2012-4030 vulnerability in Chamilo?
To fix the CVE-2012-4030 vulnerability, you should upgrade Chamilo LMS to version 1.8.8.6 or higher.