EDB-30012

functional

Chamilo Lms 1.9.6 - 'profile.php?password' SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor High-Tech Bridge SApublished 2013-12-03catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2013-6787USmedium6.0Exploit
SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earlier, when using the non-encrypted passwords mode set at instal…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan