CVE-2008-5816

SQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the refid parameter...

Sql injection

SQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the refid parameter...

CVE-2008-5816

CVE-2008-5816 describes an SQL injection in the repository.php component of ILIAS versions up to 3.7.4. The vulnerability allows remote attackers to inject and execute arbitrary SQL via the ref_id parameter, with a base CVSSv2 score of 7.5 (HIGH) and network attack vector without authentication. ...

CVE-2008-5816

SQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the refid parameter...

ILIAS 3.7.4 Blind SQL Injection

ILIAS Learning Management 50--...

ILIAS <= 3.7.4 (ref_id) Blind SQL Injection Vulnerability

No description provided by source. ILIAS Learning Management = 3.7.4 - SQL Injection Vulnerability Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, Palme, GPM, karamble, Free-Hack Date: 24.12.2008 Developer: http://www.ilias.de Dork 1: "powered by ILIAS" Dor...

ILIAS 3.7.4 - ref_id Blind SQL Injection

ILIAS 3.7.4 - refid Blind SQL Injection ILIAS Learning Management 50-- milw0rm.com 2008-12-24...

ILIAS <= 3.7.4 (ref_id) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= ILIAS 50-- 0day.today 2018-03-20...

ILIAS 3.7.4 - 'ref_id' Blind SQL Injection

ILIAS Learning Management 50-- milw0rm.com 2008-12-24...

CVE-2007-5806

Cross-site scripting XSS vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the 1 mailing or 2 forum component, as demonstrated using the style and...

Cross site scripting

Cross-site scripting XSS vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the 1 mailing or 2 forum component, as demonstrated using the style and...

CVE-2007-5806

CVE-2007-5806 is an XSS vulnerability in ILIAS 3.8.3 and earlier affecting the file Services/Utilities/classes/class.ilUtil.php . The issue allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the mailing or forum components, demonstrated us...

CVE-2007-5806

Cross-site scripting XSS vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the 1 mailing or 2 forum component, as demonstrated using the style and...

ilias-xss.txt

====================================================================== ILIAS Impact: Cross Site Scripting Status: patch available ------------------------------ Affected software description: ------------------------------ Application: ILIAS Version: = 3.8.3 Vendor: http://www.ilias.de Descriptio...

ILIAS &lt;= 3.8.3 Cross Site Scripting

====================================================================== ILIAS = 3.8.3 Cross Site Scripting ====================================================================== Author: L4teral l4teral 4t gmail com Impact: Cross Site Scripting Status: patch available ------------------------------...

CVE-2024-33526

A Stored Cross-site Scripting XSS vulnerability in the "Import of user role and title of user role" feature in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with administrative privileges to inject arbitrary web script or HTML via XML file upload...

CVE-2024-33527

A Stored Cross-site Scripting XSS vulnerability in the "Import of Users and login name of user" feature in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with administrative privileges to inject arbitrary web script or HTML via XML file upload...

CVE-2024-33525

A Stored Cross-site Scripting XSS vulnerability in the "Import of organizational units and title of organizational unit" feature in ILIAS 7.20 to 7.29 and ILIAS 8.4 to 8.10 as well as ILIAS 9.0 allows remote authenticated attackers with administrative privileges to inject arbitrary web script or...

CVE-2024-33528

A Stored Cross-site Scripting XSS vulnerability in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with tutor privileges to inject arbitrary web script or HTML via XML file upload...