Ilias vulnerabilities

Products

• Ilias 43

Newest

• ilias An issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1. An attacker can execute arbitrary... CVE-2023-32778 3.3 LowSeptember 14, 2026
• ilias learning management system ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.php executeQueries sql injection CVE-2026-12789 5.1 MediumJune 21, 2026
• ilias, ilias.de ilias learning management system +1 more ILIAS Learning Management System 4.3 - SSRF CVE-2020-36944 6.9 MediumJanuary 28, 2026
• ilias ILIAS Base64 Decoding unserialize deserialization CVE-2025-11346 5.3 MediumOctober 6, 2025
• ilias ILIAS Test Import unserialize deserialization CVE-2025-11345 5.1 MediumOctober 6, 2025
• ilias ILIAS Certificate Import code injection CVE-2025-11344 5.3 MediumOctober 6, 2025
• ilias A Stored Cross-site Scripting (XSS) vulnerability in the "Import of Users and login name of user"... CVE-2024-33527 5.4 MediumMay 21, 2024
• ilias A Stored Cross-site Scripting (XSS) vulnerability in the "Import of user role and title of user... CVE-2024-33526 7.1 HighMay 21, 2024
• ilias ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote authenticated... CVE-2024-33529 7.2 HighMay 21, 2024
• ilias A Stored Cross-site Scripting (XSS) vulnerability in ILIAS 7 before 7.30 and ILIAS 8 before 8.11... CVE-2024-33528 4.7 MediumMay 21, 2024
• ilias The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to... CVE-2023-36486 7.2 HighDecember 25, 2023
• ilias The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to... CVE-2023-36485 7.2 HighDecember 25, 2023
• ilias ILIAS 7.25 (2023-09-12) allows any authenticated user to execute arbitrary operating system... CVE-2023-45869 9.0 CriticalOctober 26, 2023
• ilias The Learning Module in ILIAS 7.25 (2023-09-12 release) allows an attacker (with basic user... CVE-2023-45868 8.1 HighOctober 26, 2023
• ilias ILIAS (2013-09-12 release) contains a medium-criticality Directory Traversal local file inclusion... CVE-2023-45867 6.5 MediumOctober 26, 2023
• ilias ILIAS 7.21 allows stored Cross Site Scripting (XSS). CVE-2023-36488 5.4 MediumJune 29, 2023
• ilias The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows... CVE-2023-36487 9.8 CriticalJune 29, 2023
• ilias ILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting (XSS). CVE-2023-36484 6.1 MediumJune 29, 2023
• ilias ILIAS before 7.16 allows External Control of File Name or Path. CVE-2022-45918 6.5 MediumDecember 7, 2022
• ilias ILIAS before 7.16 has an Open Redirect. CVE-2022-45917 6.1 MediumDecember 7, 2022
• ilias ILIAS before 7.16 allows XSS. CVE-2022-45916 5.4 MediumDecember 7, 2022
• ilias ILIAS before 7.16 allows OS Command Injection. CVE-2022-45915 8.8 HighDecember 7, 2022
• ilias In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page)... CVE-2022-31266 4.3 MediumJune 29, 2022
• ilias A local file inclusion vulnerability in ILIAS before 5.3.19, 5.4.10 and 6.0 allows remote... CVE-2020-23996 8.8 HighMay 13, 2021
• ilias An information disclosure vulnerability in ILIAS before 5.3.19, 5.4.12 and 6.0 allows remote... CVE-2020-23995 6.5 MediumMay 13, 2021
• ilias Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect... CVE-2020-25268 8.8 HighNovember 10, 2020
• ilias An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4. CVE-2020-25267 5.4 MediumNovember 10, 2020
• ilias Ilias 5.3 before 5.3.12; 5.2 before 5.2.21 is affected by: Cross Site Scripting (XSS) - CWE-79... CVE-2019-1010237 6.1 MediumJuly 22, 2019
• ilias ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in... CVE-2018-10428 6.1 MediumMay 23, 2018
• ilias error.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception. CVE-2018-10307 6.1 MediumMay 18, 2018
• ilias Services/Form/classes/class.ilDateDurationInputGUI.php and Services/Form/classes/class... CVE-2018-10306 6.1 MediumMay 18, 2018
• ilias Services/COPage/classes/class.ilPCSourceCode.php in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5... CVE-2018-11120 6.1 MediumMay 17, 2018
• ilias ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 redirects a logged-in user to a third-party site via... CVE-2018-11119 6.1 MediumMay 17, 2018
• ilias The RSS subsystem in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a URI to Services... CVE-2018-11118 6.1 MediumMay 17, 2018
• ilias Services/Feeds/classes/class.ilExternalFeedItem.php in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5... CVE-2018-11117 6.1 MediumMay 17, 2018
• ilias ILIAS 5.3.4 has XSS through unsanitized output of PHP_SELF, related to shib_logout.php and third... CVE-2018-10665 6.1 MediumMay 2, 2018
• ilias ILIAS before 5.2.4 has XSS via the cmd parameter to the displayHeader function in setup/classes... CVE-2018-5688 Public exploit 6.1 MediumJanuary 14, 2018
• ilias Stored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5... CVE-2017-15538 5.4 MediumOctober 17, 2017
• ilias ILIAS before 5.2.3 has XSS via SVG documents. CVE-2017-7583 6.1 MediumApril 7, 2017
• ilias Multiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote... CVE-2014-2090 Public exploit 3.5 LowMarch 2, 2014
• ilias ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that... CVE-2014-2089 Public exploit 6.8 MediumMarch 2, 2014
• ilias Unrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated... CVE-2014-2088 Public exploit 6.5 MediumMarch 2, 2014
• ilias SQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers... CVE-2008-5816 Public exploit 7.5 HighJanuary 2, 2009
• ilias Cross-site scripting (XSS) vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS... CVE-2007-5806 4.3 MediumNovember 5, 2007