439 matches found
CVE-2023-36487
The password reset function in ILIAS 7.0beta1 through 7.20 and 8.0beta1 through 8.1 allows remote attackers to take over the account...
CVE-2023-36488
ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to stored Cross Site Scripting XSS...
CVE-2023-36484
ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting XSS...
CVE-2023-36487
CVE-2023-36487 affects ILIAS password reset functionality across ILIAS 7.0 beta1–7.20 and 8.0 beta1–8.1, enabling remote account takeover. The NVD entry lists CVSSv3.1 base score 9.8 (CRITICAL) with network attack vector, no privileges, no user interaction needed, and high impact to confidentiali...
ILIAS 跨站脚本漏洞
ILIAS is an open source learning management system. A security vulnerability exists in ILIAS versions 7.21, 8.0beta1, and 8.2 that stems from susceptibility to stored cross-site scripting XSS attacks...
CVE-2023-36484
ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting XSS...
ILIAS 跨站脚本漏洞
ILIAS is an open source learning management system. A security vulnerability exists in ILIAS versions 7.21, 8.0beta1 through 8.2, which stems from susceptibility to reflected cross-site scripting XSS...
CVE-2023-36487
The password reset function in ILIAS 7.0beta1 through 7.20 and 8.0beta1 through 8.1 allows remote attackers to take over the account...
CVE-2023-36484
ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting XSS...
CVE-2023-36488
ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to stored Cross Site Scripting XSS...
PT-2023-8583 · Ilias · Ilias
Name of the Vulnerable Software and Affected Versions: ILIAS versions prior to 7.23 ILIAS versions 8 prior to 8.3 Description: The issue is related to insufficient input validation in the workflow-engine of ILIAS, allowing remote authenticated users to execute arbitrary system commands on the...
ilias-solutions.com Cross Site Scripting vulnerability OBB-3329604
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ILIAS < 6.23, 7.x < 7.19 XSS Vulnerability
ILIAS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if...
ILIAS 6.24, 7.x < 7.20 Multiple Vulnerabilities
ILIAS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if description...
ILIAS < 6.23 XSS Vulnerability
ILIAS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if...
ILIAS < 7.19 Multiple Vulnerabilities
ILIAS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if description...
ILIAS < 6.22 Multiple Vulnerabilities
ILIAS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if description...
ILIAS 7.x < 7.18 Multiple Vulnerabilities
ILIAS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if description...
ILIAS eLearning 7.15 Command Injection / XSS / LFI / Open Redirect Vulnerabilities
ILIAS eLearning versions 7.15 and below suffer from authenticated command injection, persistent cross site scripting, local file inclusion, and open redirection vulnerabilities. ======================================================================= title: Multiple critical vulnerabilities produc...
