Tag
Chamilo LMS Weak Password Reset Vulnerability (CVE-2026-33707)
2 rules 1 TTP 1 CVE 1 IOCChamilo LMS versions prior to 1.11.38 and 2.0.0-RC.3 are vulnerable to a weak password reset mechanism, allowing attackers to compute password reset tokens using only a user's email address due to the use of SHA1 hashing without randomization, expiration, or rate limiting, leading to unauthorized account takeover.
Chamilo LMS SSRF Vulnerability in Social Wall Feature
2 rules 1 TTP 1 CVEA Server-Side Request Forgery (SSRF) vulnerability exists in Chamilo LMS versions prior to 1.11.38 and 2.0.0-RC.3, allowing authenticated attackers to make arbitrary HTTP requests, scan internal ports, and access cloud instance metadata via the Social Wall feature.
Chamilo LMS Insecure Direct Object Reference Vulnerability (CVE-2026-32930)
2 rules 2 TTPs 1 CVEAn Insecure Direct Object Reference (IDOR) vulnerability in Chamilo LMS (CVE-2026-32930) allows authenticated teachers to modify gradebook evaluation settings of other courses by manipulating the 'editeval' GET parameter, leading to unauthorized data modification.