Sploitus

47 exploited vulnerabilities in Chamilo

Vulnerabilities with publicly known exploits

Vendors
Chamilo
With known exploits
47
Affected Chamilo versions
≤ 1.11.18, 1.11.14, 1.11.16, 1.11, 1.11.20
Affected Chamilo Chamilo Lms versions
< 1.11.28, 1.11.30, 1.11.18, 1.11.34, 1.11.26, 2.0.0

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2023-34960 9 exploits
CVSS 10.0 CRITICAL 2023-06-13FIX AVAILABLE
Chamilo unauthenticated command injection in PowerPoint uploadChamilo 1.11.18 Command Injection Exploit
CVE-2021-34187
CVSS 10.0 CRITICAL 2021-06-28FIX AVAILABLE
CVE-2025-50187
CVSS 9.8 CRITICAL 2026-03-02FIX AVAILABLE
CVE-2025-52998
CVSS 9.8 CRITICAL 2025-05-13FIX AVAILABLE
CVE-2025-50192
CVSS 9.8 CRITICAL 2025-04-01FIX AVAILABLE
CVE-2023-34944
CVSS 9.8 CRITICAL 2023-06-13
CVE-2025-50191
CVSS 9.4 HIGH 2025-04-01FIX AVAILABLE
CVE-2021-32925
CVSS 9.4 HIGH 2021-05-13FIX AVAILABLE
CVE-2025-50199
CVSS 9.1 CRITICAL 2025-04-01FIX AVAILABLE
CVE-2025-55289
CVSS 9.0 CRITICAL 2026-03-06FIX AVAILABLE
CVE-2025-55208
CVSS 9.0 CRITICAL 2026-03-05FIX AVAILABLE
CVE-2025-59543
CVSS 9.0 CRITICAL 2025-09-23FIX AVAILABLE
CVE-2025-59542
CVSS 9.0 CRITICAL 2025-09-23FIX AVAILABLE
CVE-2025-50198
CVSS 9.0 HIGH 2025-04-01FIX AVAILABLE
CVE-2025-52468
CVSS 8.8 HIGH 2026-03-02FIX AVAILABLE
CVE-2022-42029
CVSS 8.8 HIGH 2022-10-17
CVE-2022-40407
CVSS 8.8 HIGH 2022-09-29FIX AVAILABLE
CVE-2024-47886
CVSS 8.7 HIGH 2026-03-02FIX AVAILABLE
CVE-2025-50197
CVSS 8.7 HIGH 2025-04-01FIX AVAILABLE
CVE-2025-50196
CVSS 8.7 HIGH 2025-04-01FIX AVAILABLE
CVE-2025-50195
CVSS 8.7 HIGH 2025-04-01FIX AVAILABLE
CVE-2025-50194
CVSS 8.7 HIGH 2025-04-01FIX AVAILABLE
CVE-2025-50193
CVSS 8.7 HIGH 2025-04-01FIX AVAILABLE
CVE-2025-50188
CVSS 8.5 HIGH 2025-04-01FIX AVAILABLE
CVE-2025-52482
CVSS 8.3 HIGH 2026-03-02FIX AVAILABLE
CVE-2025-59541
CVSS 8.1 HIGH 2025-09-23FIX AVAILABLE
CVE-2023-34962
CVSS 8.1 HIGH 2023-06-08
CVE-2026-34239
CVSS 7.5 HIGH 2026-07-20FIX AVAILABLE
CVE-2026-33714
CVSS 7.2 HIGH 2026-04-14FIX AVAILABLE
CVE-2021-31933 3 exploits
CVSS 7.2 HIGH 2021-04-30FIX AVAILABLE
Chamilo LMS 1.11.14 - Remote Code Execution ExploitChamilo LMS 1.11.14 - Remote Code Execution (Authenticated)
CVE-2025-52469
CVSS 7.1 HIGH 2026-03-02FIX AVAILABLE
CVE-2025-59544
CVSS 6.9 MEDIUM 2026-03-06FIX AVAILABLE
CVE-2025-52564
CVSS 6.9 MEDIUM 2026-03-02FIX AVAILABLE
CVE-2025-59540
CVSS 6.4 MEDIUM 2026-03-06FIX AVAILABLE
CVE-2023-34961
CVSS 6.1 MEDIUM 2023-06-08FIX AVAILABLE
CVE-2021-37389
CVSS 6.1 MEDIUM 2021-08-10
CVE-2023-34959
CVSS 5.3 MEDIUM 2023-06-08FIX AVAILABLE
CVE-2025-50186
CVSS 4.8 MEDIUM 2026-03-02FIX AVAILABLE
CVE-2023-37067
CVSS 4.8 MEDIUM 2023-07-07
CVE-2023-37066
CVSS 4.8 MEDIUM 2023-07-07
CVE-2023-37065
CVSS 4.8 MEDIUM 2023-07-07
CVE-2023-37064
CVSS 4.8 MEDIUM 2023-07-07
CVE-2023-37063
CVSS 4.8 MEDIUM 2023-07-07
CVE-2023-37062
CVSS 4.8 MEDIUM 2023-07-07
CVE-2023-37061
CVSS 4.8 MEDIUM 2023-07-07
CVE-2023-34958
CVSS 4.3 MEDIUM 2023-06-08FIX AVAILABLE
CVE-2023-39061
CVSS 3.5 LOW 2023-08-21