Description

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/editinstance.php via the POST main_database parameter. This issue has been patched in version 1.11.30.

Remediation

References

CVE-2025-50196

Related Vulnerabilities

WordPress Plugin Daily Maui Photo Widget Multiple Cross-Site Scripting Vulnerabilities (0.2)

WordPress Plugin Are You a Human-The Fun Spam Blocker Cross-Site Scripting (1.4.32)

PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0060)

WordPress Plugin Ultimate Membership Pro SQL Injection (3.3)

WordPress Plugin WP Affiliate Platform Multiple Vulnerabilities (6.3.9)

Severity

High

Classification

CVE-2025-50196 CWE-138 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities