Description

Chamilo is a learning management system. Prior to version 1.11.28, parameter from SOAP request is evaluated without filtering which leads to Remote Code Execution. This issue has been patched in version 1.11.28.

Remediation

References

CVE-2025-50187

Related Vulnerabilities

OpenSSL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2018-0734)

Drupal Core 6.x Cross-Site Scripting (6.0 - 6.10)

Oracle JRE CVE-2018-2602 Vulnerability (CVE-2018-2602)

Oracle Application Server Other Vulnerability (CVE-2004-1365)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5272)

Severity

Critical

Classification

CVE-2025-50187 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities