ILIAS 5.2.4 - Cross-Site Scripting

ILIAS 5.2.4 - Cross-Site Scripting Exploit Title: Cross Site Scripting in ILIAS CMS 5.2.3 Date: Apr 24, 2017 Software Link: https://www.ilias.de Exploit Author: Florian Kunushevci Contact: https://facebook.com/florianx00 CVE: CVE-2018-5688 Category: webapps 1. Description ILIAS before 5.2.4 has X...

ILIAS < 5.2.4 - Cross-Site Scripting

Exploit Title: Cross Site Scripting in ILIAS CMS 5.2.3 Date: Apr 24, 2017 Software Link: https://www.ilias.de Exploit Author: Florian Kunushevci Contact: https://facebook.com/florianx00 CVE: CVE-2018-5688 Category: webapps 1. Description ILIAS before 5.2.4 has XSS via the cmd parameter to the...

ILIAS CMS 5.2.3 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Cross Site Scripting in ILIAS CMS 5.2.3 Date: Apr 24, 2017 Software Link: https://www.ilias.de Exploit Author: Florian Kunushevci Contact: https://facebook.com/florianx00 CVE: CVE-2018-5688 Category: webapps 1. Description ILIAS...

CVE-2018-5688

creationtimestamp| type| source ---|---|--- 2018-01-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43595...

CVE-2018-5688

CVE-2018-5688 : ILIAS before 5.2.4 is vulnerable to cross-site scripting via the cmd parameter of displayHeader in setup/classes/class.ilSetupGUI.php (Setup component). This is confirmed by multiple sources (e.g., Exploit DB PoC for ILIAS