CVE-2013-6787
Chamilo LMS < 1.9.6 - Authenticated SQL Injection via Password Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-6787. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary This advisory details a SQL injection vulnerability in Chamilo LMS 1.9.6, where the 'password0' POST parameter in '/main/auth/profile.php' is insufficiently validated, allowing authenticated attackers to execute arbitrary SQL commands. The exploit requires the application to be configured without password encryption.
Description
SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earlier, when using the non-encrypted passwords mode set at installation, allows remote authenticated users to execute arbitrary SQL commands via the "password0" parameter.
Exploits (1)
This advisory details a SQL injection vulnerability in Chamilo LMS 1.9.6, where the 'password0' POST parameter in '/main/auth/profile.php' is insufficiently validated, allowing authenticated attackers to execute arbitrary SQL commands. The exploit requires the application to be configured without password encryption.