Description
Incorrect access control in Chamilo v1.11.x up to v1.11.18 allows a student to arbitrarily access and modify another student's personal notes.
Remediation
References
Related Vulnerabilities
PrestaShop Improper Privilege Management Vulnerability (CVE-2013-6295)
WordPress Plugin LifterLMS-WP LMS for eLearning, Online Courses, & Quizzes SQL Injection (7.6.2)
WordPress Plugin Stream SQL Injection (3.8.1)
ProjectSend Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-53980)
WordPress Plugin YITH WooCommerce Brands Add-On Security Bypass (1.3.6)