cve-2026-80428-ctf

CVE-2026-80428 CTF Training Lab Educational emulator of the vulnerability mechanics described in CVE-2026-80428 CWE-502: Deserialization of Untrusted Data. This is not a real ILIAS installation and not a weaponized exploit package. It is a fully containerized, isolated laboratory for students,...

ILIAS eLearning <7.16 - Open Redirect

ILIAS eLearning before 7.16 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-45917 info: name: ILIAS eLearning 7.16 - Open Redirect author:...

CVE-2026-110761

ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize arbitrary objects via crafted Test archives. Attackers can inject a malicious tstsequence sequence attribute that is passed to...

CVE-2026-110761 ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import

ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize arbitrary objects via crafted Test archives. Attackers can inject a malicious tstsequence sequence attribute that is passed to...

CVE-2026-110761 ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import

ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize arbitrary objects via crafted Test archives. Attackers can inject a malicious tstsequence sequence attribute that is passed to...

EUVD-2026-101561

ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize arbitrary objects via crafted Test archives. Attackers can inject a malicious tstsequence sequence attribute that is passed to...

CVE-2026-110761

The ILIAS platform (versions before 9.24 , 10.12 , and 11.5 ) is vulnerable to a PHP object injection vulnerability during the Test results import process. Authenticated users with permissions to create or import tests can exploit this by providing a crafted Test archive . The vulnerability occur...

CVE-2026-110761: Deserialization of Untrusted Data

ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize arbitrary objects via crafted Test archives. Attackers can inject a malicious tstsequence sequence attribute that is passed to...

CVE-2026-108113

ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling ilQtiMatImageSecurity that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a .htacces...

CVE-2026-108113

ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling ilQtiMatImageSecurity that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a .htacces...

CVE-2026-108113 ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import

ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling ilQtiMatImageSecurity that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a .htacces...

CVE-2026-108113 ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import

ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling ilQtiMatImageSecurity that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a .htacces...

EUVD-2026-95886

ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling ilQtiMatImageSecurity that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a .htacces...

CVE-2026-108113

The ILIAS learning management system versions prior to 9.24, 10.12, and 11.5 are vulnerable to an unrestricted file upload vulnerability within the QTI question import image handling component (ilQtiMatImageSecurity ). Authenticated authors with question pool import rights can exploit this by imp...

CVE-2026-108113 ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import

ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling ilQtiMatImageSecurity that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a .htacces...

CVE-2026-108113: Unrestricted Upload of File with Dangerous Type

ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling ilQtiMatImageSecurity that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a .htacces...

PT-2026-108961

ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling ilQtiMatImageSecurity that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a .htacces...

CVE-2026-107639

ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames. Attackers can embed tab-separated options, which escapeshellcmd does no...

CVE-2026-107639 ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename

ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames. Attackers can embed tab-separated options, which escapeshellcmd does no...

CVE-2026-107639

The ILIAS learning management system versions before 9.24 , 10.x before 10.12 , and 11.x before 11.5 are vulnerable to an argument injection vulnerability in the assImagemapQuestionGUI component. The root cause is that escapeshellcmd() fails to neutralize tab-separated options embedded within upl...