Chamilo Learning Management System: SQL Injection via Unvalidated User Input

Summary

The Chamilo learning management system fails to properly check user input, which allows attackers to inject malicious SQL code and manipulate database queries. This could lead to unauthorized access to sensitive data or disruption of the system. Update to version 1.11.30 or later to fix this issue.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
chamilo	chamilo_lms	<= 1.11.30	–

Original title

Chamilo is a learning management system. Prior to version 1.11.30, the application performs insufficient validation of data coming from the user from the POST resource[document][SQL_INJECTION_HERE]...

Original description

Chamilo is a learning management system. Prior to version 1.11.30, the application performs insufficient validation of data coming from the user from the POST resource[document][SQL_INJECTION_HERE] and POST login parameters found in /main/coursecopy/copy_course_session_selected.php, which allows an attacker to perform an attack aimed at modifying the database query logic by injecting an arbitrary SQL statements. This issue has been patched in version 1.11.30.

nvd CVSS3.1 8.8

nvd CVSS4.0 7.2

Vulnerability type

CWE-89 SQL Injection

https://github.com/chamilo/chamilo-lms/commit/22bb81df8f7062da20a2f6248789f47b22... Patch
https://github.com/chamilo/chamilo-lms/commit/75ab03c938adc48a3cd8234d98fc340e19... Patch
https://github.com/chamilo/chamilo-lms/commit/7903cef2eb41817c11a52ba6ac34a1d454... Patch
https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.30 Product Release Notes
https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-vxx3-648j-7p4r Exploit Mitigation Vendor Advisory