CVE-2018-20329
Published
CVSS v3
N/A
CVSS v2
5.5
MEDIUM
Affected
1
PROJECT
Description
Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue (which may optionally be made public) to extract and/or modify database information.
Chamilo is a learning management system focused on ease of use and accessibility
GitHub