CVE-2013-6787 - CVE House

Back to Database

Status published Medium CVE-2013-6787

SQL injection vulnerability in the check_user_password function in main/auth/profile.php in...

6 CVSS

Vulnerability Description

SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earlier, when using the non-encrypted passwords mode set at installation, allows remote authenticated users to execute arbitrary SQL commands via the "password0" parameter.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-6787

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from chamilo

View All →

Chamilo LMS has validation-less redirect on login page

Chamilo: Unauthorized access to update category of any user

Chamilo: Account Takeover via Stored XSS in Course Description

Chamilo: Account Takeover via Stored XSS in Course Learning Paths

Chamilo: CSRF Vulnerability in Project Deletion

Affected Vendor

chamilo

View all reports →

Affected Software

chamilo lms

Vulnerable Versions:

0, 1.8.6.2, 1.8.7, 1.8.7.1, 1.8.8.2, 1.8.8.4, 1.8.8.6, 1.9.0, 1.9.2, 1.9.4

Timeline

Official Publish: December 5th, 2013

Last Modified: August 6th, 2024

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.