{"cvss":0.0,"datePublished":"2023-12-02T00:00:00Z","dateUpdated":"2023-12-02T00:00:00Z","description":"main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter.","dueDate":"","id":"CVE-2021-34187","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"chamilo","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"chamilo chamilo Improper Neutralization of Special Elements used in an SQL Command","vendor":"chamilo"}