Description

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/manage.controller.php. This issue has been patched in version 1.11.30.

Remediation

References

CVE-2025-50195

Related Vulnerabilities

WordPress Plugin WooCommerce Cross-Site Scripting (8.9.2)

Atlassian Confluence Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6342)

WordPress Plugin SW Ajax WooCommerce Search Cross-Site Scripting (1.2.6)

WordPress Other Vulnerability (CVE-2005-2108)

WordPress Plugin Media File Renamer-Auto & Manual Rename Cross-Site Request Forgery (5.2.5)

Severity

High

Classification

CVE-2025-50195 CWE-138 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities