CVE-2026-45146High· 7.2▾ TwilightChamilo LMS is an open-source learning management system. Prior to 1.11.40 and 2.0.1, an authenticated administrator can call the get_sessions action in /main/inc/ajax/model.ajax.php with _search=true and a crafted JSON filters parameter…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 39.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
Chamilo LMS is an open-source learning management system. Prior to 1.11.40 and 2.0.1, an authenticated administrator can call the get_sessions action in /main/inc/ajax/model.ajax.php with _search=true and a crafted JSON filters parameter whose groupOp field contains SQL syntax. Because groupOp is not restricted to the expected AND or OR operators before it is incorporated into query logic, attacker-controlled input is interpreted by the database and enables blind or time-based SQL injection. Successful exploitation can disclose sensitive user, course, session, configuration, password-reset, and administrative data, modify or delete records subject to database privileges, and cause denial of service through expensive delayed queries. This issue is fixed in versions 1.11.40 and 2.0.1.
chamilo-lms < 1.11.40chamilo-lms >= 2.0.0, < 2.0.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-44344Medium· 6.6Chamilo LMS: Conditional PHP execution through vendored QuickForm eval
CVE-2026-45144High· 8.9Chamilo LMS: Stored XSS in public user-profile fields
CVE-2026-45145High· 7.5Chamilo LMS: Database-backed PHP object injection in career deserialization
CVE-2026-45141Medium· 6.5Chamilo LMS: CSRF in destructive skill-management AJAX actions
CVE-2026-45143Critical· 9.0Chamilo LMS is an open-source learning management system
CVE-2026-45140Critical· 9.8Chamilo LMS is an open-source learning management system