Medium severity6.5OSV Advisory· Published Apr 24, 2025· Updated Apr 15, 2026

CVE-2025-29529

Description

ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Chamilo/Chamilo LmsOSV
Range: CHAMILO_1_8_7_ALPHA_1, CHAMILO_1_8_7_ALPHA_2, CHAMILO_1_8_7_RC2, …
ITC Systems/Multiplan/Matrix OneCardllm-create
Range: = 3.7.4.1002

Patches

Vulnerability mechanics

References

github.com/chamilo/chamilo-lms/commit/beb07770d674fcc9db6df0e59aab107678c28682nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000