SQL Injection Vulnerability in Chamilo LMS Version 1.11.8

CVE-2018-20329 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:N

Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue (which may optionally be made public) to extract and/or modify database information.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.