Advisories · Technology
ILIAS.
Every CVE that names ILIAS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import
- ILIAS
- Insecure deserialization
- CVSS 8.7 High
ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import
- ILIAS
- Unrestricted file upload
- CVSS 8.7 High
ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename
- ILIAS
- Command injection
- CVSS 3.3 Low
Path traversal in ILIAS
- ILIAS
- Path traversal
- CVSS 5.3 Medium
ILIAS before 9.23, 10.11, and 11.4 Missing Authorization in Group Object Action Methods
- ILIAS
- Broken access control
- CVSS 8.7 High
ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter
- ILIAS
- SQL injection
- CVSS 5.3 Medium
ILIAS MediaPool ZipAdapter.php uploadMultipleSubtitleFileObject unrestricted upload
- ILIAS
- Broken access control
- Unrestricted file upload
- CVSS 7.1 High
ILIAS Arbitrary File Read via SOAP addFile
- ILIAS
- Path traversal
- CVSS 9.3 CriticalCritical · CVSS 9+
ILIAS PHP Object Injection via Shibboleth Logout
- ILIAS
- Insecure deserialization
- CVSS 5.3 Medium
ILIAS Base64 Decoding unserialize deserialization
- ILIAS
- Insecure deserialization
- CWE-20
- CVSS 5.1 Medium
ILIAS Test Import unserialize deserialization
- ILIAS
- Insecure deserialization
- CWE-20
- CVSS 5.3 Medium
ILIAS Certificate Import code injection
- ILIAS
- Other injection
- Code injection
-
Cross-site scripting in Ilias
- Ilias
- Cross-site scripting (XSS)