Chamilo LMS Unauthenticated Remote Code Execution Vulnerability in Installation Directory

A remote code execution vulnerability has been identified in Chamilo LMS versions prior to 1.11.38. This issue arises from a chained attack that can exploit PHP code in the main/install/ directory, allowing an unauthenticated attacker to modify existing files or create new ones, depending on system permissions. The vulnerability only affects portals with the main/install/ directory still present and accessible.

Impact

Exploitation of this vulnerability allows for unauthenticated remote code execution on the server.

Remediation

Users can update to Chamilo LMS version 1.11.38 or delete the main/install/ directory. If the vulnerability has been exploited, it is recommended to check for unauthorized changes in the app/config/configuration.php file, particularly in the update date, database credentials, and the 'security_key' configuration.