CyberRota Analysis
AI-GeneratedChamilo versions 1.11.40 and earlier are susceptible to authenticated remote code execution via the lang.ajax.php endpoint, which can be accessed by any authenticated user enrolled in a course. This vulnerability allows attackers to execute arbitrary code on the server, potentially compromising the entire application. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation by malicious insiders or compromised accounts.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Chamilo version 1.11.40 and earlier are vulnerable to authenticated remote code execution in the main/inc/ajax/lang.ajax.php path. This endpoint is protected only by `api_protect_course_script(true)`, which means any authenticated user enrolled in a course (student, teacher, DRH) can reach it.