Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
NA
CVE-2022-45917
Published: 07/12/2022 Updated: 06/01/2023
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 0
Subscribe to Ilias
Vulnerability Summary
ILIAS prior to 7.16 has an Open Redirect.
Vulnerability Trend
Vulnerable Product
Search on Vulmon
Subscribe to Product
ilias ilias
Exploits
Exploit DB: ILIAS eLearning 7.15 Command Injection / XSS / LFI / Open Redirect
ILIAS eLearning versions 715 and below suffer from authenticated command injection, persistent cross site scripting, local file inclusion, and open redirection vulnerabilities ...
References
CWE-601
https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-ilias-elearning-platform/
http://seclists.org/fulldisclosure/2022/Dec/7
http://packetstormsecurity.com/files/170181/ILIAS-eLearning-7.15-Command-Injection-XSS-LFI-Open-Redirect.html
https://nvd.nist.gov
https://packetstormsecurity.com/files/170181/ILIAS-eLearning-7.15-Command-Injection-XSS-LFI-Open-Redirect.html
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
encryption
CVE-2024-4331
CVE-2024-26925
arbitrary code
CVE-2006-4304
CVE-2024-25458
CVE-2024-27077
reflected XSS
CVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started