What is the CVSS score of CVE-2018-25158?

CVE-2018-25158 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of PHP are affected by CVE-2018-25158?

Chamilo LMS 1.11.8 contains a critical vulnerability allowing authenticated users to upload and execute malicious code on the learning management system.

Is there a public PoC exploit available for CVE-2018-25158?

Yes, a public proof-of-concept exploit is available for CVE-2018-25158. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2018-25158?

Within 24 hours: Audit access logs for the elfinder module and identify all active Chamilo users; notify system administrators to monitor for suspicious file uploads. Within 7 days: Implement WAF rules to block file uploads to the elfinder module, disable the elfinder filemanager if operationally feasible, or restrict access via network segmentation to trusted IPs only. Within 30 days: Evaluate upgrade to a patched Chamilo version (1.11.9+), or if unavailable, plan migration to an alternative LMS with active security support.

PHP CVE-2018-25158

HIGH

Unrestricted Upload of File with Dangerous Type (CWE-434)

2026-02-20 disclosure@vulncheck.com

PHP

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:04 vuln.today

PoC Detected

Feb 23, 2026 - 18:14 vuln.today

Public exploit code

CVE Published

Feb 20, 2026 - 23:15 nvd

HIGH 8.8

DescriptionCVE.org

Chamilo LMS 1.11.8 contains an arbitrary file upload vulnerability that allows authenticated users to upload and execute PHP files through the elfinder filemanager module. Attackers can upload files with image headers in the social myfiles section, rename them to PHP extensions, and execute arbitrary code by accessing the uploaded files.

AnalysisAI

Chamilo LMS 1.11.8 contains an arbitrary file upload vulnerability that allows authenticated users to upload and execute PHP files through the elfinder filemanager module. [CVSS 8.8 HIGH]

Technical ContextAI

Classified as CWE-434 (Unrestricted Upload of File with Dangerous Type). Chamilo LMS 1.11.8 contains an arbitrary file upload vulnerability that allows authenticated users to upload and execute PHP files through the elfinder filemanager module. Attackers can upload files with image headers in the social myfiles section, rename them to PHP extensions, and execute arbitrary code by accessing the uploaded files.

Affected ProductsAI

Component: elfinder filemanager.

RemediationAI

Monitor vendor advisories for a patch. Validate file types by content. Store uploads outside web root. Restrict network access to the affected service where possible.