Command injection

ILIAS before 7.16 allows OS Command Injection...

CVE-2022-45915

ILIAS before 7.16 allows OS Command Injection...

PT-2022-7073 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions prior to 7.16 Description: The issue is related to an open redirect in the shib logout.php script, specifically with the handling of the return parameter. This could allow a remote attacker to redirect users to an arbitrary URL...