588 matches found
CVE-2018-5688: Improper Neutralization of Input During Web Page Generation
ILIAS before 5.2.4 has XSS via the cmd parameter to the displayHeader function in setup/classes/class.ilSetupGUI.php in the Setup component...
PT-2018-17085
Name of the Vulnerable Software and Affected Versions: ILIAS versions prior to 5.2.4 Description: The issue concerns a problem with the displayHeader function in the Setup component, specifically in the setup/classes/class.ilSetupGUI.php file. It allows for XSS via the cmd parameter...
ILIAS Media Objects Component Cross-Site Scripting Vulnerability
ILIAS is a Web-based learning management system developed by the ILIAS team. The system contains modules for course management, file sharing, live chat, etc. Media Objects component is one of the media object components. A cross-site scripting vulnerability exists in the Media Objects component i...
ILIAS Detection (HTTP)
HTTP based detection of ILIAS eLearning. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.140443";...
ILIAS < 5.1.21, 5.2.x < 5.2.9 XSS Vulnerability
ILIAS eLearning is prone to a stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Cross site scripting
Stored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5.2.9 allows an authenticated user to inject JavaScript to gain administrator privileges, related to the setParameter function in Services/MediaObjects/classes/class.ilMediaItem.php...
CVE-2017-15538
Stored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5.2.9 allows an authenticated user to inject JavaScript to gain administrator privileges, related to the setParameter function in Services/MediaObjects/classes/class.ilMediaItem.php...
CVE-2017-15538
Stored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5.2.9 allows an authenticated user to inject JavaScript to gain administrator privileges, related to the setParameter function in Services/MediaObjects/classes/class.ilMediaItem.php...
CVE-2017-15538
CVE-2017-15538 affects ILIAS Media Objects. A stored XSS in the Media Objects component (setParameter in Services/MediaObjects/classes/class.ilMediaItem.php) allows an authenticated user to inject JavaScript and gain administrator privileges. Affected versions are ILIAS before 5.1.21 and 5.2.x be...
CVE-2017-15538
Stored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5.2.9 allows an authenticated user to inject JavaScript to gain administrator privileges, related to the setParameter function in Services/MediaObjects/classes/class.ilMediaItem.php...
CVE-2017-15538
Stored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5.2.9 allows an authenticated user to inject JavaScript to gain administrator privileges, related to the setParameter function in Services/MediaObjects/classes/class.ilMediaItem.php...
CVE-2017-15538: Improper Neutralization of Input During Web Page Generation
Stored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5.2.9 allows an authenticated user to inject JavaScript to gain administrator privileges, related to the setParameter function in Services/MediaObjects/classes/class.ilMediaItem.php...
PT-2017-14093
Name of the Vulnerable Software and Affected Versions ILIAS versions prior to 5.1.21 ILIAS versions 5.2.x prior to 5.2.9 Description A stored XSS issue in the Media Objects component allows an authenticated user to inject JavaScript, potentially gaining administrator privileges. This is related t...
ILIAS Cross-Site Scripting Vulnerability (CNVD-2017-05243)
ILIAS is a Web-based learning management system developed by the ILIAS team. The system contains modules for course management, file sharing, and live chat. A cross-site scripting vulnerability exists in ILIAS versions prior to 5.2.3. A remote attacker can exploit this vulnerability to inject...
Design/Logic Flaw
ILIAS before 5.2.3 has XSS via SVG documents...
CVE-2017-7583
ILIAS before 5.2.3 has XSS via SVG documents...
CVE-2017-7583
ILIAS before 5.2.3 has XSS via SVG documents...
CVE-2017-7583
ILIAS before 5.2.3 has XSS via SVG documents...
CVE-2017-7583
ILIAS before 5.2.3 contains a cross-site scripting (XSS) vulnerability via SVG documents. Connected sources confirm the issue affects ILIAS versions prior to 5.2.3 and indicate upgrading to 5.2.3 as remediation. No explicit root-cause details are provided in the documents beyond the SVG-based XSS...