CVE-2019-13082

Chamilo LMS 1.11.8 and 2.x allows remote code execution through an lp_upload.php unauthenticated file upload feature. It extracts a ZIP archive before checking its content, and once it has been extracted, does not check files in a recursive way. This means that by putting a .php file in a folder and then this folder in a ZIP archive, the server will accept this file without any checks. Because one can access this file from the website, it is remote code execution. This is related to a scorm imsmanifest.xml file, the import_package function, and extraction in $courseSysDir.$newDir.

• CWE-434

• https://0xecute.com/?p=32Exploit, Technical Description, Third Party Advisory
• https://support.chamilo.org/projects/1/wiki/Security_issuesVendor Advisory
• https://0xecute.com/?p=32Exploit, Technical Description, Third Party Advisory
• https://support.chamilo.org/projects/1/wiki/Security_issuesVendor Advisory

Published

Jun 30, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-13077Quest KACE Systems Management Appliance Server Center 9.1.31…6.1
• CVE-2019-13078Quest KACE Systems Management Appliance Server Center 9.1.31…8.8
• CVE-2019-13079Quest KACE Systems Management Appliance Server Center 9.1.31…8.8
• CVE-2019-1308A remote code execution vulnerability exists in the way that…7.5
• CVE-2019-13080Quest KACE Systems Management Appliance Server Center 9.1.31…5.4
• CVE-2019-13081Quest KACE Systems Management Appliance Server Center 9.1.31…5.4
• CVE-2019-13083XnView Classic 2.48 has a User Mode Write AV starting at xnv…
• CVE-2019-13084XnView Classic 2.48 has a User Mode Write AV starting at xnv…
• CVE-2019-13085XnView Classic 2.48 has a User Mode Write AV starting at xnv…
• CVE-2019-13086core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has …
• CVE-2019-1309A denial of service vulnerability exists when Microsoft Hype…6.8
• CVE-2019-13096TronLink Wallet 2.2.0 stores user wallet keystore in plainte…