writeups.xyz / Multiple vulnerabilities on Chamilo 1.11.18

Submitter : c2a

Date: 1 July 2023

Bounty : undisclosed

Vulnerabilities :

• OS Command Injection
• RCE
• SSRF
• IDOR
• XSS
• CSRF
• Security Code Review

Programs :

• Chamilo

Authors :

• Aituglo (@Aituglo)

Link :
https://www.randorisec.fr/chamilo-1.11.18-multiple-vulnerabilities