CVE-2026-30881

Chamilo LMS is a learning management system. Version 1.11.34 and prior contains a SQL Injection vulnerability in the statistics AJAX endpoint. The parameters date_start and date_end from $_REQUEST are embedded directly into a raw SQL string without proper sanitization. Although Database::escape_string() is called downstream, its output is immediately neutralized by str_replace("\'", "'", ...), which restores any injected single quotes — effectively bypassing the escaping mechanism entirely. This allows an authenticated attacker to inject arbitrary SQL statements into the database query, enabling blind time-based and conditional data extraction. This issue has been patched in version 1.11.36.

• CWE-89

• https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.36Product, Release Notes
• https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-5ggx-x2cv-4h44Vendor Advisory

Published

Mar 16, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-30876Chamilo LMS is a learning management system. Prior to versio…5.3
• CVE-2026-30877baserCMS is a website development framework. Prior to versio…7.2
• CVE-2026-30878baserCMS is a website development framework. Prior to versio…5.3
• CVE-2026-30879baserCMS is a website development framework. Prior to versio…6.1
• CVE-2026-3088Unauthenticated users on the local network can cause the rou…6.5
• CVE-2026-30880baserCMS is a website development framework. Prior to versio…9.8
• CVE-2026-30882Chamilo LMS is a learning management system. Chamilo LMS ver…6.1
• CVE-2026-30883ImageMagick is free and open-source software used for editin…7.8
• CVE-2026-30884mdjnelson/moodle-mod_customcert is a Moodle plugin for creat…9.6
• CVE-2026-30885WWBN AVideo is an open source video platform. Prior to 25.0,…5.3
• CVE-2026-30886New API is a large language mode (LLM) gateway and artificia…6.5
• CVE-2026-30887OneUptime is a solution for monitoring and managing online s…9.9