CVE-2023-45867

ILIAS 2013-09-12 release contains a medium-criticality Directory Traversal local file inclusion vulnerability in the ScormAicc module. An attacker with a privileged account, typically holding the tutor role, can exploit this to gain unauthorized access to and potentially retrieve confidential fil...

PT-2023-6722 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS version 7.25 Description: The issue exists due to incorrect restriction of the path name to a directory with limited access in the Learning Module component of the ILIAS learning management system. Exploitation of this issue may allow a...

PT-2023-6719 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS version 7.25 Description: The issue is related to the exec function in the execQuoted method of the ilUtil class, which lacks input sanitization. This allows attackers to inject malicious commands into the system, potentially compromisi...

ILIAS eLearning Platform XSS / Remote Code Execution

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple high risk vulnerabilities product: ILIAS eLearning platform vulnerable version: see section "Vulnerable version" below fixed version: see section "Solution" belo...

CVE-2023-36484

ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting XSS...

CVE-2023-36484

ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting XSS...

Cross site scripting

ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting XSS...

CVE-2023-36488

ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to stored Cross Site Scripting XSS...

CVE-2023-36487

The password reset function in ILIAS 7.0beta1 through 7.20 and 8.0beta1 through 8.1 allows remote attackers to take over the account...

CVE-2023-36487

The password reset function in ILIAS 7.0beta1 through 7.20 and 8.0beta1 through 8.1 allows remote attackers to take over the account...

Cross site scripting

ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to stored Cross Site Scripting XSS...

Design/Logic Flaw

The password reset function in ILIAS 7.0beta1 through 7.20 and 8.0beta1 through 8.1 allows remote attackers to take over the account...

CVE-2023-36484

ILIAS 7.21 and 8.0_beta1 through 8.2 are affected by a reflected Cross-Site Scripting (XSS) vulnerability. Evidence across CVE-2023-36484 entries (Red Hat, NVD, OSV, CNNVD, PT-Security) confirms the impacted versions and the XSS class, with a CVSSv3.1 base score of 6.1 (Network attack, User Inter...

CVE-2023-36488

CVE-2023-36488 affects ILIAS 7.21 and 8.0_beta1 through 8.2, with a stored Cross Site Scripting (XSS) vulnerability. The connected documents confirm the affected versions and vulnerability class but do not provide specific root cause details or a confirmed remediation/patch version. No exploit de...

PT-2023-25590 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions 7.21 through 8.2 Description: The issue concerns stored Cross Site Scripting XSS, which is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized...

CVE-2023-36488

ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to stored Cross Site Scripting XSS...

CVE-2023-36487

The password reset function in ILIAS 7.0beta1 through 7.20 and 8.0beta1 through 8.1 allows remote attackers to take over the account...

PT-2023-25588 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions 7.21 through 8.2 Description: The issue is related to reflected Cross-Site Scripting XSS, which allows an attacker to inject malicious scripts into a website. This can lead to unauthorized access to user data or session...

PT-2023-25589 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions 7.0 beta1 through 7.20 ILIAS versions 8.0 beta1 through 8.1 Description: The password reset function allows remote attackers to take over the account. Recommendations: For ILIAS versions 7.0 beta1 through 7.20, consider disabli...

ILIAS 安全漏洞

ILIAS is an open source learning management system. A security vulnerability exists in ILIAS versions 7.0beta1 through 7.20 and 8.0beta1 through 8.1, which stems from a password reset feature that allows a remote attacker to take over an account...