Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
NA
CVE-2022-45915
Published: 07/12/2022 Updated: 06/01/2023
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0
Subscribe to Ilias
Vulnerability Summary
ILIAS prior to 7.16 allows OS Command Injection.
Vulnerability Trend
Vulnerable Product
Search on Vulmon
Subscribe to Product
ilias ilias
Exploits
Exploit DB: ILIAS eLearning 7.15 Command Injection / XSS / LFI / Open Redirect
ILIAS eLearning versions 715 and below suffer from authenticated command injection, persistent cross site scripting, local file inclusion, and open redirection vulnerabilities ...
References
CWE-78
https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-ilias-elearning-platform/
http://seclists.org/fulldisclosure/2022/Dec/7
http://packetstormsecurity.com/files/170181/ILIAS-eLearning-7.15-Command-Injection-XSS-LFI-Open-Redirect.html
https://nvd.nist.gov
https://packetstormsecurity.com/files/170181/ILIAS-eLearning-7.15-Command-Injection-XSS-LFI-Open-Redirect.html
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48700
CVE-2022-48689
CVE-2024-27956
CVE-2023-6363
SQL
NULL pointer dereference
CVE-2023-41830
CVE-2015-2051
arbitrary
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started