Description

Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php.

Remediation

References

CVE-2021-35414

Related Vulnerabilities

WordPress 5.0.x PHP Object Injection (5.0 - 5.0.12)

EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-38843)

WordPress Plugin Backup Migration Cross-Site Request Forgery (1.2.9)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-36675)

WordPress Plugin Advanced Custom Fields (ACF) Cross-Site Scripting (4.4.7)

Severity

Critical

Classification

CVE-2021-35414 CWE-707

Tags

Missing Update Known Vulnerabilities