Description
admin/user_import.php in Chamilo 1.11.x reads XML data without disabling the ability to load external entities.
Remediation
References
Related Vulnerabilities
WordPress 5.5.x PHP Object Injection (5.5 - 5.5.4)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5335)
WordPress 3.8.x Cross-Domain Flash Injection Vulnerability (3.8 - 3.8.24)
WordPress Plugin Parsi Date Cross-Site Scripting (4.0.1)
PHP Improper Handling of Exceptional Conditions Vulnerability (CVE-2014-1943)