Security Chamilo LMS Insecure Direct Object Reference February 19, 2016 007admin Chamilo LMS suffers from an insecure direct object reference vulnerability.