Total
24 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2021-26746 | 1 Chamilo | 1 Chamilo | 2024-02-04 | 4.3 MEDIUM | 6.1 MEDIUM |
Chamilo 1.11.14 allows XSS via a main/calendar/agenda_list.php?type= URI. | |||||
CVE-2013-0738 | 1 Chamilo | 1 Chamilo | 2024-02-04 | 4.3 MEDIUM | 6.1 MEDIUM |
Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php. | |||||
CVE-2013-0739 | 1 Chamilo | 1 Chamilo | 2024-02-04 | 4.3 MEDIUM | 6.1 MEDIUM |
Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script. | |||||
CVE-2012-4029 | 1 Chamilo | 1 Chamilo | 2024-02-04 | 4.3 MEDIUM | 6.1 MEDIUM |
Cross-site scripting (XSS) vulnerability in main/dropbox/index.php in Chamilo LMS before 1.8.8.6 allows remote attackers to inject arbitrary web script or HTML via the category_name parameter in an addsentcategory action. |