3 matches found
CVE-2026-82538 ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter
ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is passed directly into the ORDER BY clause of a SQL query without validation against declared sortable columns. Authenticated...
CVE-2026-82538 ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter
ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is passed directly into the ORDER BY clause of a SQL query without validation against declared sortable columns. Authenticated...
CVE-2026-82538: Improper Neutralization of Special Elements used in an SQL Command
ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is passed directly into the ORDER BY clause of a SQL query without validation against declared sortable columns. Authenticated...