CVE-2026-82538 ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is passed directly into the ORDER BY clause of a SQL query without validation against declared sortable columns. Authenticated...

CVE-2026-82538 ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is passed directly into the ORDER BY clause of a SQL query without validation against declared sortable columns. Authenticated...

EUVD-2026-71620

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is passed directly into the ORDER BY clause of a SQL query without validation against declared sortable columns. Authenticated...

CVE-2026-82538 ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is passed directly into the ORDER BY clause of a SQL query without validation against declared sortable columns. Authenticated...

CVE-2026-82538

ILIAS before versions 9.22, 10.10, and 11.3 is affected by a SQL injection in the repository trash table . The sort field from HTTP requests is passed directly into the ORDER BY clause without validation against declared sortable columns. Authenticated users with write permission on any container...

CVE-2026-82538: Improper Neutralization of Special Elements used in an SQL Command

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is passed directly into the ORDER BY clause of a SQL query without validation against declared sortable columns. Authenticated...

PT-2026-86205

Name of the Vulnerable Software and Affected Versions ILIAS versions prior to 9.22 ILIAS versions prior to 10.10 ILIAS versions prior to 11.3 Description A SQL injection issue exists in the repository trash table. The system fails to validate the table navigation sort field from HTTP requests...

CVE-2026-85135

A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::uploadMultipleSubtitleFileObject of the file Services/Repository/Service/Resources/ZipAdapter.php of the component MediaPool. The manipulation results in unrestricted upload. The atta...

EUVD-2026-70478

A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::uploadMultipleSubtitleFileObject of the file Services/Repository/Service/Resources/ZipAdapter.php of the component MediaPool. The manipulation results in unrestricted upload. The atta...

CVE-2026-85135 ILIAS MediaPool ZipAdapter.php uploadMultipleSubtitleFileObject unrestricted upload

A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::uploadMultipleSubtitleFileObject of the file Services/Repository/Service/Resources/ZipAdapter.php of the component MediaPool. The manipulation results in unrestricted upload. The atta...

CVE-2026-85135 ILIAS MediaPool ZipAdapter.php uploadMultipleSubtitleFileObject unrestricted upload

A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::uploadMultipleSubtitleFileObject of the file Services/Repository/Service/Resources/ZipAdapter.php of the component MediaPool. The manipulation results in unrestricted upload. The atta...

CVE-2026-85135

ILIAS up to versions 9.21, 10.9, and 11.2 is affected by an unrestricted file upload vulnerability in the MediaPool component. The flaw resides in the ilObjMediaObjectGUI::uploadMultipleSubtitleFileObject function within Services/Repository/Service/Resources/ZipAdapter.php, allowing a remote atta...

CVE-2026-85135 ILIAS MediaPool ZipAdapter.php uploadMultipleSubtitleFileObject unrestricted upload

A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::uploadMultipleSubtitleFileObject of the file Services/Repository/Service/Resources/ZipAdapter.php of the component MediaPool. The manipulation results in unrestricted upload. The atta...

...[ More ]

ILIAS versions prior to 9.22, versions 10.0 through 10.9, and versions 11.0 through 11.2 contain an unauthenticated PHP object injection vulnerability in the Shibboleth logout functionality. An unauthenticated attacker can manipulate stored session data that is subsequently deserialized without...

PT-2026-85034

A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::uploadMultipleSubtitleFileObject of the file Services/Repository/Service/Resources/ZipAdapter.php of the component MediaPool. The manipulation results in unrestricted upload. The atta...

CVE-2026-85135: Unrestricted Upload of File with Dangerous Type

A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::uploadMultipleSubtitleFileObject of the file Services/Repository/Service/Resources/ZipAdapter.php of the component MediaPool. The manipulation results in unrestricted upload. The atta...

CVE-2026-82877

ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file paths through an unsandboxed import...

CVE-2026-82877 ILIAS Arbitrary File Read via SOAP addFile

ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file paths through an unsandboxed import...

CVE-2026-82877 ILIAS Arbitrary File Read via SOAP addFile

ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file paths through an unsandboxed import...

CVE-2026-82877

ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file paths through an unsandboxed import...