Description

Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php.

Remediation

References

CVE-2021-35414

Related Vulnerabilities

WordPress Plugin Fungif The Awesome GIFs Cross-Site Scripting (2.0)

WordPress Plugin RSS Feed Widget Cross-Site Scripting (2.8.0)

WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-1936)

WordPress Plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Security Bypass (7.5.12)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1754)

Severity

Critical

Classification

CVE-2021-35414 CWE-707

Tags

Missing Update Known Vulnerabilities