CVE-2021-35414: SQL Injection
Published Dec 3, 2021
·Updated
Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php.
Affected Software
1 affected component
Chamilo Chamilo LMS>=1.11.0<=1.11.16
Remediation
Event History
Dec 3, 2021
CVE Published
via MITRE·09:07 PM
Data Sourced
via MITRE·09:07 PM
Description
Frequently Asked Questions
1
What is CVE-2021-35414?
CVE-2021-35414 is a SQL injection vulnerability in Chamilo LMS v1.11.x.
2
How severe is CVE-2021-35414?
CVE-2021-35414 has a severity rating of 9.8 (Critical).
3
Which software is affected by CVE-2021-35414?
Chamilo LMS v1.11.x is affected by CVE-2021-35414.
4
How can I fix CVE-2021-35414?
To fix CVE-2021-35414, update Chamilo LMS to a version between 1.11.0 and 1.11.16.
5
Where can I find more information about CVE-2021-35414?
You can find more information about CVE-2021-35414 in the references section.