Description
Chamilo is a learning management system. Prior to version 1.11.30, there is an error-based SQL Injection via POST userFile with the /main/exercise/hotpotatoes.php script. This issue has been patched in version 1.11.30.
Remediation
References
Related Vulnerabilities
phpMyFAQ Other Vulnerability (CVE-2005-3049)
Joomla! Core 3.x.x Security Bypass (3.7.0 - 3.9.15)
WordPress 4.6.x Cross-Domain Flash Injection Vulnerability (4.6 - 4.6.9)
WordPress Plugin Admin Pack by SITE CASEIRO Cross-Site Scripting (1.1)
Python Integer Overflow or Wraparound Vulnerability (CVE-2007-4965)