Security Advisory

CVE-2018-20329

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-12-21 06:00:00
Last updated 2024-08-05 11:58:18
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue (which may optionally be made public) to extract and/or modify database information.