High severity8.1OSV Advisory· Published Dec 21, 2018· Updated Jun 17, 2026

CVE-2018-20329

Description

Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue (which may optionally be made public) to extract and/or modify database information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Chamilo/LmsOSV3 versions
CHAMILO_1_8_7_ALPHA_1, CHAMILO_1_8_7_ALPHA_2, CHAMILO_1_8_7_RC2, …+ 2 more
- (no CPE)range: CHAMILO_1_8_7_ALPHA_1, CHAMILO_1_8_7_ALPHA_2, CHAMILO_1_8_7_RC2, …
- cpe:2.3:a:chamilo:chamilo_lms:1.11.8:*:*:*:*:*:*:*
- (no CPE)range: <=1.11.8

Patches

Vulnerability mechanics

References

github.com/chamilo/chamilo-lms/commit/bfa1eccfabb457b800618d9d115f12dc614a55dfnvdPatchThird Party Advisory
support.chamilo.org/projects/1/wiki/Security_issuesnvdPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000