Skip to contentIlias Ilias vulnerabilities
- iliasAn issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1. An attacker can execute arbitrary...CVE-2023-327783.3 Low
- ilias, ilias.de ilias learning management system +1 moreILIAS Learning Management System 4.3 - SSRFCVE-2020-369446.9 Medium
- iliasILIAS Base64 Decoding unserialize deserializationCVE-2025-113465.3 Medium
- iliasILIAS Test Import unserialize deserializationCVE-2025-113455.1 Medium
- iliasILIAS Certificate Import code injectionCVE-2025-113445.3 Medium
- iliasA Stored Cross-site Scripting (XSS) vulnerability in the "Import of Users and login name of user"...CVE-2024-335275.4 Medium
- iliasA Stored Cross-site Scripting (XSS) vulnerability in the "Import of user role and title of user...CVE-2024-335267.1 High
- iliasILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote authenticated...CVE-2024-335297.2 High
- iliasA Stored Cross-site Scripting (XSS) vulnerability in ILIAS 7 before 7.30 and ILIAS 8 before 8.11...CVE-2024-335284.7 Medium
- iliasThe workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to...CVE-2023-364867.2 High
- iliasThe workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to...CVE-2023-364857.2 High
- iliasILIAS 7.25 (2023-09-12) allows any authenticated user to execute arbitrary operating system...CVE-2023-458699.0 Critical
- iliasThe Learning Module in ILIAS 7.25 (2023-09-12 release) allows an attacker (with basic user...CVE-2023-458688.1 High
- iliasILIAS (2013-09-12 release) contains a medium-criticality Directory Traversal local file inclusion...CVE-2023-458676.5 Medium
- iliasILIAS 7.21 allows stored Cross Site Scripting (XSS).CVE-2023-364885.4 Medium
- iliasThe password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows...CVE-2023-364879.8 Critical
- iliasILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting (XSS).CVE-2023-364846.1 Medium
- iliasILIAS before 7.16 allows External Control of File Name or Path.CVE-2022-459186.5 Medium
- iliasILIAS before 7.16 has an Open Redirect.CVE-2022-459176.1 Medium
- iliasILIAS before 7.16 allows XSS.CVE-2022-459165.4 Medium
- iliasILIAS before 7.16 allows OS Command Injection.CVE-2022-459158.8 High
- iliasIn ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page)...CVE-2022-312664.3 Medium
- iliasA local file inclusion vulnerability in ILIAS before 5.3.19, 5.4.10 and 6.0 allows remote...CVE-2020-239968.8 High
- iliasAn information disclosure vulnerability in ILIAS before 5.3.19, 5.4.12 and 6.0 allows remote...CVE-2020-239956.5 Medium
- iliasRemote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect...CVE-2020-252688.8 High
- iliasAn XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4.CVE-2020-252675.4 Medium
- iliasIlias 5.3 before 5.3.12; 5.2 before 5.2.21 is affected by: Cross Site Scripting (XSS) - CWE-79...CVE-2019-10102376.1 Medium
- iliasILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in...CVE-2018-104286.1 Medium
- iliaserror.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception.CVE-2018-103076.1 Medium
- iliasServices/Form/classes/class.ilDateDurationInputGUI.php and Services/Form/classes/class...CVE-2018-103066.1 Medium
- iliasServices/COPage/classes/class.ilPCSourceCode.php in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5...CVE-2018-111206.1 Medium
- iliasILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 redirects a logged-in user to a third-party site via...CVE-2018-111196.1 Medium
- iliasThe RSS subsystem in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a URI to Services...CVE-2018-111186.1 Medium
- iliasServices/Feeds/classes/class.ilExternalFeedItem.php in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5...CVE-2018-111176.1 Medium
- iliasILIAS 5.3.4 has XSS through unsanitized output of PHP_SELF, related to shib_logout.php and third...CVE-2018-106656.1 Medium
- iliasILIAS before 5.2.4 has XSS via the cmd parameter to the displayHeader function in setup/classes...CVE-2018-5688Public exploit6.1 Medium
- iliasStored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5...CVE-2017-155385.4 Medium
- iliasILIAS before 5.2.3 has XSS via SVG documents.CVE-2017-75836.1 Medium
- iliasMultiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote...CVE-2014-2090Public exploit3.5 Low
- iliasILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that...CVE-2014-2089Public exploit6.8 Medium
- iliasUnrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated...CVE-2014-2088Public exploit6.5 Medium
- iliasSQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers...CVE-2008-5816Public exploit7.5 High
- iliasCross-site scripting (XSS) vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS...CVE-2007-58064.3 Medium