Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue (which may optionally be made public) to extract and/or modify database information.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
chamilo chamilo lms 1.11.8 |