CVE-2025-50196Disclosure(chamilo / chamilo_lms)

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/editinstance.php via the POST main_database parameter. This issue has been patched in version 1.11.30.

chamilo CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Exploit / PoC references

https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-qfvp-xg47-m7m2

Other references

https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.30

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

chamilo_lms

Threat summary

3 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 2d ago at 1 mentions (2026-03-05); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

chamilo

Products

chamilo_lms

Deep dive

Activity timeline3 mentions / 3d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets1 URL

By indicator

https://nvd.nist.gov/vuln/detail/CVE-2025-50196

Full discourse3 posts

CRAC Learning - Tech@cracbot218d
Disclosure
CVE-2025-50196 (CVSS:7.1, HIGH) is Analyzed. Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /pl..https://nvd.nist.gov/vuln/detail/CVE-2025-50196 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces the discovery of an OS Command Injection vulnerability in Chamilo, affecting versions before 1.11.30, with a CVSS score of 7.1.
00000111
173 followersView on X
CRAC Learning - Tech@cracbot219d
Disclosure
CVE-2025-50196 (CVSS:7.1, HIGH) is Analyzed. Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /pl..https://nvd.nist.gov/vuln/detail/CVE-2025-50196 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post highlights a high‑severity OS command injection flaw in Chamilo prior to version 1.11.30, noting its CVSS score, but provides no proof‑of‑concept, exploit code, or patch information.
0000053
173 followersView on X
CRAC Learning - Tech@cracbot220d
Disclosure
CVE-2025-50196 (CVSS:7.1, HIGH) is Analyzed. Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /pl..https://nvd.nist.gov/vuln/detail/CVE-2025-50196 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post discloses a CVE-2025-50196 OS Command Injection vulnerability in Chamilo LMS, noting its severity (CVSS 7.1, HIGH) without further details on exploitation or mitigation.
0000037
173 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	chamilo	chamilo_lms	-	-	-

Explore more

Back to dashboard chamilo CVEs chamilo_lms vulnerabilities