CVE Feed

    Dashboard / CVE / CVE-2021-35413

    CVE-2021-35413

    A remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file.

    Published:Dec 3, 2021
    Last Modified:Nov 21, 2024
    EPS:Dec 3, 2021
    EPSS Score:0.03237
    CVSS Score:8.8

    Affected Products

    Vendor
    Chamilo
    Product
    Chamilo Lms

    Exploits

    https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#authenticated-remote-code-execution-in-import-filehttps://github.com/andrejspuler/writeups/tree/main/chamilo-lms#authenticated-remote-code-execution-in-import-file

    Common Weakness Enumeration

    CWE-862 Missing Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-665 Exploitation of Thunderbolt Protection Flaws

    Related CVEs

    CVE-2026-34239 (CVSS 7.5) — Chamilo version 1.11.40 and earlier are vulnerable to authenticated remote code execution in the main/inc/ajax…
    CVE-2026-39878 (CVSS 9.3) — Chamilo LMS versions 1.11.38 and earlier contain a stored cross-site scripting vulnerability in the user regis…
    CVE-2026-40291 (CVSS 8.8) — Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, an insecure direct …
    CVE-2026-35196 (CVSS 8.8) — Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, an OS Command Injec…
    CVE-2026-34602 (CVSS 7.1) — Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, the /api/course_rel…
    CVE-2026-34370 (CVSS 6.5) — Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, the notebook module…
    CVE-2026-34161 (CVSS 5.1) — Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, a Stored Cross-Site…
    CVE-2026-34160 (CVSS 8.6) — Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, the PENS (Package E…
    CVE-2026-33715 (CVSS 7.2) — Chamilo LMS is an open-source learning management system. In version 2.0-RC.2, the file public/main/inc/ajax/i…
    CVE-2026-33714 (CVSS 7.1) — Chamilo is an open-source learning management system (LMS). Version 2.0.0-RC.2 contains a SQL Injection vulner…

    References

    https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#authenticated-remote-code-execution-in-import-file
    https://github.com/chamilo/chamilo-lms/commit/2e5c004b57d551678a1815500ef91524ba7bb757
    https://github.com/chamilo/chamilo-lms/commit/905a21037ebc9bc5369f0fb380177cb56f496f5c
    https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-66-2021-05-21-High-impact-very-low-risk-Authenticated-RCE-in-accessory-script
    https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#authenticated-remote-code-execution-in-import-file
    https://github.com/chamilo/chamilo-lms/commit/2e5c004b57d551678a1815500ef91524ba7bb757
    https://github.com/chamilo/chamilo-lms/commit/905a21037ebc9bc5369f0fb380177cb56f496f5c
    https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-66-2021-05-21-High-impact-very-low-risk-Authenticated-RCE-in-accessory-script

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High