CVE-2022-45917

ILIAS before 7.16 has an Open Redirect...

CVE-2022-45917

ILIAS before 7.16 has an Open Redirect...

PT-2022-27684 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions prior to 7.16 Description: The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website. Recommendations: For versions prior to 7.16, update to version...

PT-2022-27683 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions prior to 7.16 Description: The issue allows for OS Command Injection. Recommendations: For versions prior to 7.16, update to version 7.16 or later to resolve the issue...

ILIAS 操作系统命令注入漏洞

ILIAS is an open source learning management system. A security vulnerability exists in ILIAS versions prior to 7.16. An attacker exploited the vulnerability to perform OS command injection attacks...

CVE-2022-45916

ILIAS before 7.16 allows XSS...

CVE-2022-45915

ILIAS before 7.16 allows OS Command Injection...

ILIAS 输入验证错误漏洞

ILIAS is an open source learning management system. A security vulnerability exists in ILIAS versions prior to 7.16. An attacker exploited the vulnerability to trick users into visiting the URL of a trusted site and redirect them to a malicious site...

CVE-2022-45916

CVE-2022-45916 affects the ILIAS eLearning platform. The connected PT-Security advisory specifies that versions prior to 7.16 are vulnerable to a cross-site scripting (XSS) issue, with a fixed release at 7.16. The core problem is an XSS vulnerability in ILIAS before 7.16, leading to potential scr...

CVE-2022-45915

ILIAS before 7.16 allows OS Command Injection...

CVE-2022-45915

ILIAS before 7.16 allows OS Command Injection...

CVE-2022-45917

ILIAS before 7.16 has an Open Redirect...

ILIAS < 6.20, 7.x < 7.16 Multiple Vulnerabilities

ILIAS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if description...

PT-2022-7073 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions prior to 7.16 Description: The issue is related to an open redirect in the shib logout.php script, specifically with the handling of the return parameter. This could allow a remote attacker to redirect users to an arbitrary URL...

ILIAS <= 7.23 Account Takeover Vulnerability

ILIAS is prone to an account takeover vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if description...

CVE-2022-31266

In ILIAS through 7.10, lack of verification when changing an email address on the Profile Page allows remote attackers to take over accounts...

CVE-2022-31266

In ILIAS through 7.10, lack of verification when changing an email address on the Profile Page allows remote attackers to take over accounts...

Design/Logic Flaw

In ILIAS through 7.10, lack of verification when changing an email address on the Profile Page allows remote attackers to take over accounts...

CVE-2022-31266

In ILIAS through 7.10, lack of verification when changing an email address on the Profile Page allows remote attackers to take over accounts...

CVE-2022-31266

CVE-2022-31266 affects ILIAS up to version 7.10. The issue is a lack of verification when changing the email address on the Profile Page, which allows remote attackers to take over accounts. The vulnerability is documented across multiple sources (Red Hat, NVD, OSV, OpenVAS, CNNVD) with consisten...