439 matches found
CVE-2022-45917
CVE-2022-45917 affects ILIAS eLearning versions before 7.16 and is an Open Redirect vulnerability. Multiple connected sources confirm the issue originates in the Shibboleth logout flow (shib_logout.php) where a crafted return parameter can redirect users to an arbitrary URL. Impact is described a...
CVE-2022-45915
ILIAS before 7.16 allows OS Command Injection...
CVE-2022-45918
CVE-2022-45918 affects ILIAS eLearning platform prior to 7.16. The vulnerability is External Control of File Name or Path, with upstream advisories and Red Hat corroborating that versions
ILIAS 输入验证错误漏洞
ILIAS is an open source learning management system. A security vulnerability exists in ILIAS versions prior to 7.16. An attacker exploited the vulnerability to trick users into visiting the URL of a trusted site and redirect them to a malicious site...
CVE-2022-45915
CVE-2022-45915 affects ILIAS eLearning platform. Multiple connected sources confirm that ILIAS prior to version 7.16 is vulnerable to OS Command Injection, with fixed version 7.16 or later. The vulnerability impacts versions
CVE-2022-45916
ILIAS before 7.16 allows XSS...
CVE-2022-45915
ILIAS before 7.16 allows OS Command Injection...
CVE-2022-45918
ILIAS before 7.16 allows External Control of File Name or Path...
CVE-2022-45917
ILIAS before 7.16 has an Open Redirect...
ILIAS < 6.20, 7.x < 7.16 Multiple Vulnerabilities
ILIAS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if description...
PT-2022-7073 · Ilias · Ilias
Name of the Vulnerable Software and Affected Versions: ILIAS versions prior to 7.16 Description: The issue is related to an open redirect in the shib logout.php script, specifically with the handling of the return parameter. This could allow a remote attacker to redirect users to an arbitrary URL...
ILIAS <= 7.23 Account Takeover Vulnerability
ILIAS is prone to an account takeover vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if description...
CVE-2022-31266
In ILIAS through 7.10, lack of verification when changing an email address on the Profile Page allows remote attackers to take over accounts...
CVE-2022-31266
In ILIAS through 7.10, lack of verification when changing an email address on the Profile Page allows remote attackers to take over accounts...
Design/Logic Flaw
In ILIAS through 7.10, lack of verification when changing an email address on the Profile Page allows remote attackers to take over accounts...
CVE-2022-31266
CVE-2022-31266 affects ILIAS up to version 7.10. The issue is a lack of verification when changing the email address on the Profile Page, which allows remote attackers to take over accounts. The vulnerability is documented across multiple sources (Red Hat, NVD, OSV, OpenVAS, CNNVD) with consisten...
CVE-2022-31266
In ILIAS through 7.10, lack of verification when changing an email address on the Profile Page allows remote attackers to take over accounts...
CVE-2022-31266
In ILIAS through 7.10, lack of verification when changing an email address on the Profile Page allows remote attackers to take over accounts...
ILIAS 安全漏洞
ILIAS is an open source learning management system. A security vulnerability exists in ILIAS version 7.10 and earlier versions, which stems from a lack of validation when changing an email address on the profile page. An attacker exploited the vulnerability to remotely take over an account...