CVE-2021-34187: 
Chamilo vulnerability analysis and mitigation

A SQL Injection vulnerability was discovered in Chamilo through version 1.11.14, specifically in the main/inc/ajax/model.ajax.php file. The vulnerability allows attackers to perform SQL Injection attacks via the searchField, filters, or filters2 parameters. The vulnerability was discovered on May 25, 2021, and was assigned CVE-2021-34187 (MITRE, NVD).

The vulnerability exists due to lack of sanitization of GET-parameters searchField, filters, and filters2 in the /main/inc/ajax/model.ajax.php file. The issue affects both Chamilo LMS 1.11.x and development version 2.x. The vulnerability was tested on Windows 10 x64, Apache 2.4, MariaDB 10.3.22, and PHP 7.4 environments. The CVSS score for this vulnerability is 7.5, indicating high severity (CISA).

The vulnerability allows unauthenticated attackers to perform SQL injection attacks that could potentially lead to unauthorized access to the database, data theft, or manipulation of database contents. Being an unauthenticated SQL injection vulnerability, it poses a significant risk as it can be exploited without requiring any form of authentication (Murat One).

The vulnerability can be exploited by sending specially crafted HTTP requests containing malicious SQL code in the searchField, filters, or filters2 parameters. Proof of concept exploits have been publicly documented demonstrating successful SQL injection attacks against both version 1.11.x and 2.x of the platform (Murat One).

The vulnerability was patched on May 28, 2021, with the release of security updates. The fixes were implemented through two commits: one for version 1.11.x (GitHub Commit) and another for version 2.x (GitHub Commit). Users are strongly advised to upgrade to the patched versions.