Chamilo OS Command Injection Vulnerability in Language Parsing Script

A command injection vulnerability has been identified in Chamilo Learning Management System (LMS) versions prior to 1.11.30. The issue resides in the language parsing script used by the cron job feature, where insufficient validation of user input allows for the execution of arbitrary commands on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of commands on the server, potentially allowing an attacker to manipulate the system or access sensitive information.

Reproduction

To reproduce this vulnerability, log in as an administrator and navigate to the 'Languages' settings page. Enable the option for defining and using sub-languages, then save the settings. Afterward, create a sub-language entry with a payload in the 'English name' field. Once the entry is saved, the payload will be executed when the language parsing script is accessed via the cron job.

Remediation

Users should update to Chamilo version 1.11.30 or later, where this vulnerability has been patched.