Description

Chamilo LMS through 1.9.10.2 allows a link_goto.php?link_url= open redirect, a related issue to CVE-2015-5503.

Remediation

References

CVE-2015-9540

Related Vulnerabilities

WordPress Plugin Calendar Event Multi View SQL Injection (1.01)

Grafana Other Vulnerability (CVE-2021-28147)

Cherokee Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-2191)

WordPress 5.3.x Prototype Pollution (5.3 - 5.3.11)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-4133)

Severity

Medium

Classification

CVE-2015-9540 CWE-601 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities