Product by Chamilo
Chamilo
134 known vulnerabilities in Chamilo (Chamilo), 0 of them actively exploited (CISA KEV).
Key figures
134
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
21
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-4220 | Chamilo LMS Unauthenticated Big Upload File Remote Code Execution | 8.1 | |
| Critical | CVE-2026-45140 | Chamilo LMS CStudio upload flow allows unauthenticated remote code execution | 9.8 | |
| Critical | CVE-2019-13082 | Chamilo LMS: Unauthenticated File Upload | 9.8 | |
| High | CVE-2025-50196 | Chamilo-lms: OS Command Injection | 7.2 | |
| High | CVE-2025-50194 | Chamilo: OS Command Injection in /main/cron/lang/check_parse_lang.php | 7.2 | |
| High | CVE-2025-50193 | Chamilo-lms: OS Command Injection | 7.2 | |
| High | CVE-2025-50197 | Chamilo-lms: OS Command Injection | 7.2 | |
| High | CVE-2025-50195 | Chamilo: OS Command Injection in /plugin/vchamilo/views/manage.controller.php | 7.2 | |
| Critical | CVE-2018-1999019 | Chamilo LMS: Remote Code Execution | 9.8 | |
| High | CVE-2026-35196 | Chamilo LMS has OS Command Injection via export_all_certificates action | 8.8 | |
| High | CVE-2023-4226 | Chamilo LMS File Upload Functionality Remote Code Execution | 8.8 | |
| Critical | CVE-2026-32892 | OS Command Injection in Chamilo LMS 1.11.36 | 8.8 | |
| High | CVE-2023-4221 | Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability | 7.2 | |
| High | CVE-2023-4222 | Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability | 7.2 | |
| High | CVE-2021-35413 | Chamilo LMS: Remote Code Execution | 8.8 | |
| Critical | CVE-2021-35414 | Chamilo LMS: SQL Injection | 9.8 | |
| High | CVE-2023-4225 | Chamilo LMS File Upload Functionality Remote Code Execution | 8.8 | |
| High | CVE-2023-4223 | Chamilo LMS File Upload Functionality Remote Code Execution | 8.8 | |
| High | CVE-2023-4224 | Chamilo LMS File Upload Functionality Remote Code Execution | 8.8 | |
| Critical | CVE-2025-50187 | Chamilo: Evaluation of untrusted user input leads to Remote Code Execution | 9.8 | |
| High | CVE-2024-47886 | Chamilo: Post-Auth Remote Code Execution | 7.2 | |
| Critical | CVE-2026-45143 | Chamilo LMS: Student-to-admin stored XSS in private messages via v-html | 9.0 | |
| Critical | CVE-2023-34944 | Chamilo LMS: Unrestricted File Upload | 9.8 | |
| High | CVE-2025-50189 | Chamilo: Error-based SQL Injection | 8.8 | |
| Critical | CVE-2025-50192 | Chamilo: Time-based SQL Injection in /main/webservices/registration.soap.php | 9.8 |