VYPR
← All advisories
Medium severity4.9NVD Advisory· Published Sep 1, 2023· Updated Jun 17, 2026

CVE-2023-39582

CVE-2023-39582

Description

SQL Injection vulnerability in Chamilo LMS v.1.11 thru v.1.11.20 allows a remote privileged attacker to obtain sensitive information via the import sessions functions.

Affected products

3
  • Chamilo/Lms2 versions
    cpe:2.3:a:chamilo:chamilo_lms:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:chamilo:chamilo_lms:*:*:*:*:*:*:*:*range: >=1.11,<=1.11.20
    • (no CPE)range: 1.11 - 1.11.20
  • Chamilo/LMSdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.