PT-2020-7335 · Chamilo · Chamilo

Published 2020-01-30 · Updated 2020-01-31 · CVE-2013-0738

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Chamilo version 1.9.4

Description: The issue concerns multiple XSS and HTML Injection vulnerabilities. These vulnerabilities are found in the blog.php and announcements.php files.

Recommendations: For Chamilo version 1.9.4, consider disabling access to the blog.php and announcements.php files until a fix is available. Avoid using user-inputted data in these files to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-0738

Affected Products

Chamilo

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-0738 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83104 · Note
• https://t.me/cvenotify/644 · Telegram Post
• http://securityfocus.com/bid/58735 · Note