Arbitrary File Deletion Vulnerability in Chamilo before 1.8.8.6

CVE-2012-4030 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Chamilo before 1.8.8.6 does not adequately handle user supplied input by the index.php script, which could allow remote attackers to delete arbitrary files.

Learn more about our User Device Pen Test.