Description

Chamilo is a learning management system. Prior to version 1.11.28, parameter from SOAP request is evaluated without filtering which leads to Remote Code Execution. This issue has been patched in version 1.11.28.

Remediation

References

CVE-2025-50187

Related Vulnerabilities

WordPress Plugin RegistrationMagic-Custom Registration Forms, User Registration, Payment, and User Login Multiple Vulnerabilities (4.6.0.1)

MySQL CVE-2017-3458 Vulnerability (CVE-2017-3458)

Oracle JRE Improper Access Control Vulnerability (CVE-2025-30698)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5732)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3385)

Severity

Critical

Classification

CVE-2025-50187 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities