Chamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with access to 'big file uploads' to copy/move files from anywhere in the file system into the web directory.
| Software | From | Fixed in |
|---|---|---|
| chamilo / chamilo | 1.11.16 | 1.11.16.x |