Chamilo Chamilo Lms vulnerabilities
122 published vulnerabilities in Chamilo Chamilo Lms. The most were published in 2026 (37), and 37 so far in 2026.
Chamilo Chamilo Lms vulnerabilities by year
2012
2013
2015
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Chamilo Chamilo Lms vulnerabilities
- CVE-2025-50187 Chamilo: Evaluation of untrusted user input leads to Remote Code Execution
- CVE-2023-34944 File upload in n/a
- CVE-2022-27423 SQL injection in n/a
- CVE-2021-35414 SQL injection in n/a
- CVE-2019-13082 File upload in n/a
- CVE-2018-1999019 Deserialization in n/a
- CVE-2026-33707 Weak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms
- CVE-2026-33698 Chamilo LMS affected by unauthenticated RCE in main/install folder
- CVE-2026-28430 Chamilo LMS Vulnerable to Unauthenticated SQL Injection in chamiko-lms model.ajax.php
- CVE-2026-32892 OS Command Injection in Chamilo LMS 1.11.36
- CVE-2025-59542 Chamilo: Account Takeover via Stored XSS in Course Learning Paths
- CVE-2025-59543 Chamilo: Account Takeover via Stored XSS in Course Description
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.