CVE-2007-5806

CVE-2007-5806 is an XSS vulnerability in ILIAS 3.8.3 and earlier affecting the file Services/Utilities/classes/class.ilUtil.php . The issue allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the mailing or forum components, demonstrated us...

CVE-2007-5806: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the 1 mailing or 2 forum component, as demonstrated using the style and...

ilias-xss.txt

====================================================================== ILIAS Impact: Cross Site Scripting Status: patch available ------------------------------ Affected software description: ------------------------------ Application: ILIAS Version: = 3.8.3 Vendor: http://www.ilias.de Descriptio...

ILIAS <= 3.8.3 Cross Site Scripting

====================================================================== ILIAS = 3.8.3 Cross Site Scripting ====================================================================== Author: L4teral l4teral 4t gmail com Impact: Cross Site Scripting Status: patch available ------------------------------...

CVE-2024-33526

A Stored Cross-site Scripting XSS vulnerability in the "Import of user role and title of user role" feature in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with administrative privileges to inject arbitrary web script or HTML via XML file upload...

CVE-2024-33527

A Stored Cross-site Scripting XSS vulnerability in the "Import of Users and login name of user" feature in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with administrative privileges to inject arbitrary web script or HTML via XML file upload...

CVE-2024-33525

A Stored Cross-site Scripting XSS vulnerability in the "Import of organizational units and title of organizational unit" feature in ILIAS 7.20 to 7.29 and ILIAS 8.4 to 8.10 as well as ILIAS 9.0 allows remote authenticated attackers with administrative privileges to inject arbitrary web script or...

CVE-2024-33528

A Stored Cross-site Scripting XSS vulnerability in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with tutor privileges to inject arbitrary web script or HTML via XML file upload...