ILIAS Remote Code Execution Vulnerability

ILIAS is a powerful open source learning management system for developing and implementing web-based e-learning. A remote code execution vulnerability exists in ILIAS 6.4. The vulnerability stems from a parameter validation error on Magpie RSS data. An attacker can exploit this vulnerability to...

CVE-2020-25268

Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data...

CVE-2020-25268

ILIAS 6.4 is vulnerable to Remote Code Execution via the external news feed due to incorrect parameter sanitization of Magpie RSS data. The issue affects the Magpie RSS data parsing path, enabling an attacker to execute code remotely. CVSS details indicate a high impact (C, I, A high) with networ...

CVE-2020-25268: Improper Neutralization of Argument Delimiters in a Command

Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data...

PT-2020-16052

Name of the Vulnerable Software and Affected Versions ILIAS version 6.4 Description Remote Code Execution can occur via the external news feed in ILIAS because of incorrect parameter sanitization for Magpie RSS data. Recommendations For ILIAS version 6.4, update to a version that addresses the...