İçeriğe atla
Noroxi

ILIAS kayıtları

ilias üreticisine ait 42 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%7,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

42 kayıt
  • CVE-2023-36487
    39İzleyin

    The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account.

    KritikCVSS 9,8İstismar yokEPSS %1

    ilias · ilias29 Haz 2023

  • CVE-2022-45915
    36İzleyin

    ILIAS before 7.16 allows OS Command Injection.

    YüksekCVSS 8,8İstismar yokEPSS %4

    ilias · ilias6 Ara 2022

  • CVE-2020-25268
    36İzleyin

    Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data.

    YüksekCVSS 8,8İstismar yokEPSS %2

    ilias · ilias10 Kas 2020

  • CVE-2020-23996
    36İzleyin

    A local file inclusion vulnerability in ILIAS before 5.3.19, 5.4.10 and 6.0 allows remote authenticated attackers to execute arbitrary code

    YüksekCVSS 8,8İstismar yokEPSS %2

    ilias · ilias13 May 2021

  • CVE-2023-45869
    36İzleyin

    ILIAS 7.25 (2023-09-12) allows any authenticated user to execute arbitrary operating system commands remotely, when a highly privileged acco

    KritikCVSS 9,0İstismar yokEPSS %0

    ilias · ilias26 Eki 2023

  • CVE-2023-45868
    32İzleyin

    The Learning Module in ILIAS 7.25 (2023-09-12 release) allows an attacker (with basic user privileges) to achieve a high-impact Directory Tr

    YüksekCVSS 8,1İstismar yokEPSS %1

    ilias · ilias26 Eki 2023

  • CVE-2008-5816
    30İzleyin

    SQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the r

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    ilias · ilias2 Oca 2009

  • CVE-2014-2089
    28İzleyin

    ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a cert

    OrtaCVSS 6,8Kavram kanıtıEPSS %2

    ilias · ilias2 Mar 2014

  • CVE-2024-33529
    28İzleyin

    ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote authenticated attackers with administrative privileges to exec

    YüksekCVSS 7,2İstismar yokEPSS %0

    ilias · ilias21 May 2024

  • CVE-2023-36486
    28İzleyin

    The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the applicat

    YüksekCVSS 7,2İstismar yokEPSS %0

    ilias · ilias25 Ara 2023

  • CVE-2023-36485
    28İzleyin

    The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the applicat

    YüksekCVSS 7,2İstismar yokEPSS %0

    ilias · ilias25 Ara 2023

  • CVE-2024-33526
    28İzleyin

    A Stored Cross-site Scripting (XSS) vulnerability in the "Import of user role and title of user role" feature in ILIAS 7 before 7.30 and ILI

    YüksekCVSS 7,1İstismar yokEPSS %0

    ilias · ilias21 May 2024

  • CVE-2014-2088
    27İzleyin

    Unrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated users to execute arbitrary PHP code by using

    OrtaCVSS 6,5Kavram kanıtıEPSS %2

    ilias · ilias2 Mar 2014

  • CVE-2020-36944
    27İzleyin

    ILIAS Learning Management System 4.3 - SSRF

    OrtaCVSS 6,9İstismar yokEPSS %0

    ilias · ilias28 Oca 2026

  • CVE-2020-23995
    26İzleyin

    An information disclosure vulnerability in ILIAS before 5.3.19, 5.4.12 and 6.0 allows remote authenticated attackers to get the upload data

    OrtaCVSS 6,5İstismar yokEPSS %1

    ilias · ilias13 May 2021

  • CVE-2022-45918
    26İzleyin

    ILIAS before 7.16 allows External Control of File Name or Path.

    OrtaCVSS 6,5İstismar yokEPSS %1

    ilias · ilias6 Ara 2022

  • CVE-2023-45867
    26İzleyin

    ILIAS (2013-09-12 release) contains a medium-criticality Directory Traversal local file inclusion vulnerability in the ScormAicc module.

    OrtaCVSS 6,5İstismar yokEPSS %0

    ilias · ilias26 Eki 2023

  • CVE-2018-5688
    25İzleyin

    ILIAS before 5.2.4 has XSS via the cmd parameter to the displayHeader function in setup/classes/class.ilSetupGUI.php in the Setup component.

    OrtaCVSS 6,1Kavram kanıtıEPSS %3

    ilias · ilias14 Oca 2018

  • CVE-2022-45917
    25İzleyin

    ILIAS before 7.16 has an Open Redirect.

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    ilias · ilias6 Ara 2022

  • CVE-2018-10428
    25İzleyin

    ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in parameter handling, is vulnerable to various ins

    OrtaCVSS 6,1İstismar yokEPSS %1

    ilias · ilias23 May 2018

  • CVE-2019-1010237
    24İzleyin

    Ilias 5.3 before 5.3.12; 5.2 before 5.2.21 is affected by: Cross Site Scripting (XSS) - CWE-79 Type 2: Stored XSS (or Persistent).

    OrtaCVSS 6,1İstismar yokEPSS %1

    ilias · ilias22 Tem 2019

  • CVE-2018-11118
    24İzleyin

    The RSS subsystem in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a URI to Services/Feeds/classes/class.ilExternalFeedItem.php.

    OrtaCVSS 6,1İstismar yokEPSS %1

    ilias · ilias17 May 2018

  • CVE-2018-10306
    24İzleyin

    Services/Form/classes/class.ilDateDurationInputGUI.php and Services/Form/classes/class.ilDateTimeInputGUI.php in ILIAS 5.1.x through 5.3.x b

    OrtaCVSS 6,1İstismar yokEPSS %1

    ilias · ilias18 May 2018

  • CVE-2017-7583
    24İzleyin

    ILIAS before 5.2.3 has XSS via SVG documents.

    OrtaCVSS 6,1İstismar yokEPSS %1

    ilias · ilias7 Nis 2017

  • CVE-2018-10665
    24İzleyin

    ILIAS 5.3.4 has XSS through unsanitized output of PHP_SELF, related to shib_logout.php and third-party demo files.

    OrtaCVSS 6,1İstismar yokEPSS %1

    ilias · ilias2 May 2018