CVE-2014-2089

2014-03-0217:00:00

mitre

www.cve.org

7.6 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.4%

JSON

ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a certain client_id pathname.

References

packetstormsecurity.com/files/125350/ILIAS-4.4.1-Cross-Site-Scripting-Shell-Upload.html