EUVD-2018-2381

Malware in sbrugna...

Cross site scripting

error.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception...

CVE-2018-10307

error.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception...

CVE-2018-10307

ILIAS LMS vulnerability CVE-2018-10307 affects ILIAS 5.2.x through 5.3.x before 5.3.4. The issue is an XSS in error.php triggered by the text of a PDO exception, allowing injection of arbitrary web script/HTML. Impact is user-exposed XSS; exploitation details are not provided beyond the injection...