Chamilo

Every one of the 33 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Chamilo Command InjectionCVE-2023-34960Chamilo · 99% likely

   CWE-77

2. Chamilo LMS <= 1.11.24 - Remote Code ExecutionCVE-2023-4220Chamilo · CVSS 8.1 · 76% likely

   CWE-434

3. Chamilo LMS <= v1.11.20 Unauthenticated Command InjectionCVE-2023-3368Chamilo · CVSS 9.8 · 70% likely

   CWE-78

4. Chamilo model.ajax.php - SQL InjectionCVE-2021-34187Chamilo · 16% likely

   CWE-89

5. A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a parameter used for file uploads, and improper file-extension filter…CVE-2021-31933Chamilo · CVSS 7.2 · 14% likely

   CWE-706

6. Chamilo LMS Learning Path PPT2LP Command Injection VulnerabilityCVE-2023-4222Chamilo · CVSS 7.2 · 3.5% likely

   CWE-78

7. Chamilo LMS Learning Path PPT2LP Command Injection VulnerabilityCVE-2023-4221Chamilo · CVSS 7.2 · 3.5% likely

   CWE-78

8. Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File WriteCVE-2023-3533Chamilo · CVSS 9.8 · 3.5% likely

   CWE-22

9. Chamilo LMS File Upload Functionality Remote Code ExecutionCVE-2023-4226Chamilo · CVSS 8.8 · 2.5% likely

   CWE-434

10. Chamilo LMS Htaccess File Upload Security BypassCVE-2023-3545Chamilo · CVSS 9.8 · 2.4% likely

    CWE-178

11. Chamilo LMS File Upload Functionality Remote Code ExecutionCVE-2023-4225Chamilo · CVSS 8.8 · 1.8% likely

    CWE-434

12. Chamilo LMS File Upload Functionality Remote Code ExecutionCVE-2023-4223Chamilo · CVSS 8.8 · 1.8% likely

    CWE-434

13. Chamilo LMS File Upload Functionality Remote Code ExecutionCVE-2023-4224Chamilo · CVSS 8.8 · 1.8% likely

    CWE-434

14. A zip slip vulnerability in the file upload function of Chamilo v1.11 allows attackers to execute arbitrary code via a crafted Zip file.CVE-2022-40407Chamilo · CVSS 8.8 · 1.7% likely

    CWE-434

15. admin/user_import.php in Chamilo 1.11.x reads XML data without disabling the ability to load external entities.CVE-2021-32925Chamilo · 1.7% likely

    CWE-611

16. Cross-site scripting (XSS) vulnerability in main/dropbox/index.php in Chamilo LMS before 1.8.8.6 allows remote attackers to inject arbitrary web script or HTML via the category_na…CVE-2012-4029Chamilo · 1.4% likely

    CWE-79

17. chamilo-lms v1.11.14 is affected by a Cross Site Scripting (XSS) vulnerability in /plugin/jcapture/applet.php if an attacker passes a message hex2bin in the cookie.CVE-2021-43687Chamilo · 1.2% likely

    CWE-79

18. A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted URL.CVE-2021-40662Chamilo · 1.1% likely

    CWE-352

19. Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter.CVE-2021-37389Chamilo · 1.0% likely

    CWE-79

20. Chamilo 1.11.14 allows XSS via a main/calendar/agenda_list.php?type= URI.CVE-2021-26746Chamilo · 1.0% likely

    CWE-79

21. Chamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with access to 'big file uploads' to copy/move files from anywh…CVE-2022-42029Chamilo · CVSS 8.8 · 0.9% likely

    CWE-434

22. Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execute arbitrary code via a crafted plugin. This vulnerability…CVE-2021-38745Chamilo · 0.9% likely

    CWE-94

23. Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script.CVE-2013-0739Chamilo · 0.8% likely

    CWE-79

24. Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php.CVE-2013-0738Chamilo · 0.8% likely

    CWE-79

25. Chamilo LMS v1.11.13 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /blog/blog.php.CVE-2022-27425Chamilo · 0.6% likely

    CWE-79

26. Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the classes/usergroups management section.CVE-2023-37067Chamilo · 0.4% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.