Chamilo Vulnérabilités

Chronologie

Taper

Produit

Chamilo LMS52
Chamilo Integration Module1

Contre-mesures

Official Fix32
Temporary Fix0
Workaround0
Unavailable0
Not Defined21

Exploitabilité

High0
Functional0
Proof-of-Concept1
Unproven0
Not Defined52

Vecteur d'accès

Not Defined0
Physical0
Local0
Adjacent6
Network47

Authentification

Not Defined0
High9
Low35
None9

Interaction de l'utilisateur

Not Defined0
Required27
None26

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤414
≤515
≤63
≤77
≤88
≤96
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤414
≤515
≤64
≤77
≤87
≤96
≤100

VulDB

≤10
≤20
≤37
≤420
≤53
≤66
≤710
≤87
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤513
≤68
≤72
≤80
≤95
≤104

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤82
≤95
≤103

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k15
<2k33
<5k5
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k44
<2k8
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (2): Integration Module (1), LMS (52)

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
28/11/20237.57.5Chamilo LMS work.ajax.php elévation de privilègesContent Management SystemNot DefinedOfficial Fix0.002930.04CVE-2023-4226
28/11/20237.57.5Chamilo LMS exercise.ajax.php elévation de privilègesContent Management SystemNot DefinedOfficial Fix0.002930.00CVE-2023-4225
28/11/20237.57.5Chamilo LMS dropbox.ajax.php elévation de privilègesContent Management SystemNot DefinedOfficial Fix0.002930.00CVE-2023-4224
28/11/20238.58.4Chamilo LMS File Upload additional_webservices.php directory traversalContent Management SystemNot DefinedOfficial Fix0.003500.02CVE-2023-3533
28/11/20236.66.6Chamilo LMS bigUpload.php elévation de privilègesContent Management SystemNot DefinedOfficial Fix0.001630.00CVE-2023-4220
28/11/20238.58.4Chamilo LMS additional_webservices.php elévation de privilègesContent Management SystemNot DefinedOfficial Fix0.918440.02CVE-2023-3368
28/11/20236.96.9Chamilo LMS openoffice_text_document.class.php elévation de privilègesContent Management SystemNot DefinedOfficial Fix0.002250.00CVE-2023-4222
28/11/20236.96.9Chamilo LMS openoffice_presentation.class.php elévation de privilègesContent Management SystemNot DefinedOfficial Fix0.002250.00CVE-2023-4221
28/11/20237.57.5Chamilo LMS document.ajax.php elévation de privilègesContent Management SystemNot DefinedOfficial Fix0.002930.02CVE-2023-4223
28/11/20238.58.4Chamilo LMS File Upload fileUpload.lib.php Remote Code ExecutionContent Management SystemNot DefinedOfficial Fix0.004450.04CVE-2023-3545

43 plus d'entrées ne sont pas affichées

Might our Artificial Intelligence support you?

Check our Alexa App!