PT-2021-20908 · Unknown · Chamilo Lms

Published 2021-12-03 · Updated 2021-12-06 · CVE-2021-35414

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Chamilo LMS version v1.11.x

Description: The issue is related to a SQL injection via the doc parameter in the main/plagiarism/compilatio/upload.php file. This allows for potential exploitation. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations: For Chamilo LMS version v1.11.x, consider disabling access to the upload.php file in the main/plagiarism/compilatio directory until a patch is available. Avoid using the doc parameter in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-35414

Affected Products

Chamilo Lms

References · 11

• 🔥 https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#unauthenticated-sql-injection-in-compilatio-module · Exploit
• 🔥 https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#unauthenticated-sql-injection-2-in-plugin · Exploit
• https://github.com/chamilo/chamilo-lms/commit/6a98e32bb04aa66cbd0d29ad74d7d20cc7e7e9c5 · Patch
• https://github.com/chamilo/chamilo-lms/commit/f398b5b45c019f873a54fe25c815dbaaf963728b · Patch
• https://github.com/chamilo/chamilo-lms/commit/36149c1ff99973840a809bb865f23e1b23d6df00 · Patch
• https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-65-2021-05-15-High-impact-very-high-risk-Unauthenticated-SQL-injection-in-plugin · Vendor Advisory
• https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-59-2021-05-13-High-impact-low-risk-Unauthenticated-SQL-injection-vulnerability-when-a-module-is-enabled · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-35414 · Security Note
• https://osv.dev/vulnerability/CVE-2021-35414 · Vendor Advisory
• https://t.me/cvenotify/24291 · Telegram Post
• https://t.me/cibsecurity/33346 · Telegram Post