CVE-2025-50188 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Chamilo is a learning management system. Prior to version 1.11.30, the application performs insufficient validation of data coming from the user from the GET va…
High CVSS: 7.0

CVE-2025-50188

Chamilo is a learning management system. Prior to version 1.11.30, the application performs insufficient validation of data coming from the user from the GET value parameter with the following scripts: /plugin/vchamilo/views/syncparams.php and /plugin/vchamilo/ajax/service.php, which allows an attacker to perform an attack aimed at modifying the database query logic by injecting an arbitrary SQL statements. This issue has been patched in version 1.11.30.
Vendor
Chamilo
Product
Chamilo Lms
CWE
CWE-89
Yayın Tarihi
2026-03-02 15:16:30
Güncelleme
2026-03-03 19:12:46
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-89 Chamilo Lms HIGH Chamilo 2026

Referanslar

https://github.com/chamilo/chamilo-lms/commit/ef54cc0906a3caaa3e7ac9b640b044f03b1fe733 https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.30 https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-96j3-x45m-9q3r