Security Chamilo LMS Insecure Direct Object Reference February 19, 2016 007admin Leave a comment Chamilo LMS suffers from an insecure direct object reference vulnerability.