Chamilo model.ajax.php - SQL Injection

Short Info


Level

Critical

Single Scan

Single Scan

Can be used by

Asset Owner

Estimated Time

10 seconds

Time Interval

13 days 15 hours

Scan only one

URL

Toolbox

-

main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter.


References:
Get started to protecting your digital assets