ILIAS < 7.26 Multiple Vulnerabilities

ILIAS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if description...

Server: ACLs not properly enforced in "documents" application

The "documents" application is a collaborative web-based online editor for ODT files. Using this application you can easily share and collaborate on office documents. This application uses strong and very long random "Session IDs" to limit access to specific resources. Knowledge of this ID allows...

xheditor online editor lead to stored xss-vulnerability warning-the black bar safety net

Brief description: The issue before the hair, http://tmxk.org/thread-411-1-1.html that This is at the limit of the Source mode in the case appearxss. Detailed description: First, the official website deomo for testing. ! ! ! Test example the ! Description of case Soufun, phpsoso, the kingcms...

Cute Editor online editor local include vulnerability xday-vulnerability warning-the black bar safety net

First, the vulnerability description: CuteEditor for ASP. NET is built on an Html Foundation, most easy-to-use, most powerful WYSIWYG Asp. net online editor. CuteEditor can help Asp. net developers to easily on the original text boxTextareacontentincluding text, images and other Html contentfor...

Luo letter network built station of 0DAY-vulnerability warning-the black bar safety net

Baidu or google "technical support：Luo letter network" Background address: site+lx Database address: site+lx+databases+Main Domain Name. asp need to guess Account&password: admin admin Down is to get the shell Important part: upload the jpg format of the asp horse Database backup,Please note that...

ewebeditor for php&asp version of the backend skips the authentication vulnerability-vulnerability warning-the black bar safety net

Affected versions:php v3. 8,asp v2. 8 eWebEditor is a WYSIWYG online editor. As the name suggests, is on the network using the WYSIWYG edit mode for editing illustrated articles, news, discussions stickers, circulars, notes and other word processing applications. ../ewebeditor/admin/config. php...

The corporate website is black universal vulnerability-the vulnerability warning-the black bar safety net

The corporate website is black universal vulnerability Webmasters runaway revenge only in this document to each enterprise network administrator, I hope for your help - The runaway revenge 1, The default account and password General network company for the enterprises to do the website or the...

EASYNEWS news management system v1. 0 1 official version has multiple vulnerabilities-vulnerability warning-the black bar safety net

Source: San ㄗ Feng 訫 locks of love'S Blog EASYNEWS news management system v1. 0 1 official version has multiple vulnerabilities A ReadNews. asp requestNewsID=Request. QueryString"NewsID" 'pass to give the news numbers NewsID rs. Source="select from News where NewsID=" & amp; requestNewsID 'query...

Beware of being black with caution eWebEditor online editor-vulnerability warning-the black bar safety net

Network popular the website is news, forums, e-Mall as well as the blog. These systems will be required to have set the text size, color and insert images and other functions, so on the network there is a corresponding third-party functional components to complete the corresponding function, such...