439 matches found
ILIAS Cross-Site Scripting Vulnerability (CNVD-2019-24000)
Ilias is an open source learning management system. A cross-site scripting vulnerability exists in Assessment/TestQuestionPool in Ilias version 5.3 before 5.3.12 and version 5.2 before 5.2.21. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...
CVE-2019-1010237
Ilias 5.3 before 5.3.12; 5.2 before 5.2.21 is affected by: Cross Site Scripting XSS - CWE-79 Type 2: Stored XSS or Persistent. The impact is: Execute code in the victim's browser. The component is: Assessment / TestQuestionPool. The attack vector is: Cloze Test Text gap attacker / Corrections vie...
CVE-2019-1010237
Ilias 5.3 before 5.3.12; 5.2 before 5.2.21 is affected by: Cross Site Scripting XSS - CWE-79 Type 2: Stored XSS or Persistent. The impact is: Execute code in the victim's browser. The component is: Assessment / TestQuestionPool. The attack vector is: Cloze Test Text gap attacker / Corrections vie...
Cross site scripting
Ilias 5.3 before 5.3.12; 5.2 before 5.2.21 is affected by: Cross Site Scripting XSS - CWE-79 Type 2: Stored XSS or Persistent. The impact is: Execute code in the victim's browser. The component is: Assessment / TestQuestionPool. The attack vector is: Cloze Test Text gap attacker / Corrections vie...
CVE-2019-1010237
CVE-2019-1010237 affects ILIAS prior to 5.3.12 and 5.2.21, with a Stored XSS (CWE-79, Type 2) in the Assessment / TestQuestionPool . The vulnerability arises from inadequate validation of client-side data, allowing an attacker to execute code in the victim’s browser via the Cloze Test Text gap (a...
CVE-2019-1010237
Ilias 5.3 before 5.3.12; 5.2 before 5.2.21 is affected by: Cross Site Scripting XSS - CWE-79 Type 2: Stored XSS or Persistent. The impact is: Execute code in the victim's browser. The component is: Assessment / TestQuestionPool. The attack vector is: Cloze Test Text gap attacker / Corrections vie...
ILIAS Default Credentials (HTTP)
ILIAS is using default administrative credentials. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ILIAS cross-site scripting vulnerability (CNVD-2018-10487)
ILIAS is a Web-based learning management system developed by the ILIAS team. The system contains modules for course management, file sharing, and live chat. A cross-site scripting vulnerability exists in ILIAS versions prior to 5.1.26, 5.2.x prior to 5.2.15 and 5.3.x prior to 5.3.4. A remote...
CVE-2018-10428
ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in parameter handling, is vulnerable to various instances of reflected cross-site-scripting...
Cross site scripting
ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in parameter handling, is vulnerable to various instances of reflected cross-site-scripting...
CVE-2018-10428
ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in parameter handling, is vulnerable to various instances of reflected cross-site-scripting...
CVE-2018-10428
ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in parameter handling, is vulnerable to various instances of reflected cross-site-scripting...
CVE-2018-10428
CVE-2018-10428 affects ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4 due to inconsistencies in parameter handling that enable reflected cross-site scripting. The vulnerability allows a remote attacker to lure a user to a crafted website to execute arbitrary JavaScript within th...
ILIAS 5.3.2 / 5.2.14 / 5.1.25 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications ILIAS 5.3.2 / 5.2.14 / 5.1.25 Cross Site Scripting Vulnerability Product: ILIAS Affected Versions: 5.3.2, 5.2.14, 5.1.25 Tested Versions: 5.3.2, 5.2.12 Vulnerability Type: Reflected Cross-Site-Scripting Risk Level: MEDIUM Solution Status: Fixe...
ILIAS 5.3.2 / 5.2.14 / 5.1.25 Cross Site Scripting
Advisory ID: SYSS-2018-007 Product: ILIAS Affected Versions: 5.3.2, 5.2.14, 5.1.25 Tested Versions: 5.3.2, 5.2.12 Vulnerability Type: Reflected Cross-Site-Scripting Risk Level: MEDIUM Solution Status: Fixed Manufacturer Notification: 2018-03-29 Solution Date: 2018-04-25 Public Disclosure:...
ILIAS Cross-Site Scripting Vulnerability (CNVD-2018-10348)
ILIAS is a Web-based learning management system developed by the ILIAS team. The system contains modules for course management, file sharing, and live chat. ILIAS version 5.3.x before 5.3.4 and version 5.2.x have Services/Form/classes/class.ilDateDurationInputGUI.php and...
ILIAS LMS 5.1.x < 5.1.26 Multiple Vulnerabilities (May 2018)
ILIAS LMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; ifdescription...
ILIAS LMS Multiple Vulnerabilities-02 (May 2018)
ILIAS LMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; ifdescription...