VYPR
← All advisories
Critical severity9.8OSV Advisory· Published Jul 23, 2018· Updated Jun 17, 2026

CVE-2018-1999019

CVE-2018-1999019

Description

Chamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter for the api endpoint located at /webservices/api/v2.php that can result in Unauthenticated remote code execution. This attack appear to be exploitable via a simple GET request to the api endpoint. This vulnerability appears to have been fixed in After commit 0de84700648f098c1fbf6b807dee28ec640efe62.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

22
  • Chamilo/LmsOSV22 versions
    CHAMILO_1_8_7_ALPHA_1, CHAMILO_1_8_7_ALPHA_2, CHAMILO_1_8_7_RC2, …+ 21 more
    • (no CPE)range: CHAMILO_1_8_7_ALPHA_1, CHAMILO_1_8_7_ALPHA_2, CHAMILO_1_8_7_RC2, …
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.0:-:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.0:alpha2:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.0:beta3:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.0:beta4:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.0:beta5:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.0:beta6:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.0:beta7:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.2:*:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.4:-:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.4:alpha1:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.4:alpha2:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.4:beta1:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.4:rc1:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.6:-:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.6:alpha1:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.8:-:*:*:*:*:*:*
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.8:rc1:*:*:*:*:*:*
    • (no CPE)range: 11.x

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.