Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:ilias:ilias:*:*:*:*:*:*:*:*

3 briefs RSS
high advisory

Argument Injection in ILIAS assImagemapQuestionGUI

An argument injection vulnerability in the ILIAS assImagemapQuestionGUI component allows authenticated question authors to achieve remote code execution by injecting ImageMagick options via crafted filenames.

ILIAS web-application rce vulnerability
2t 1c
high advisory

SQL Injection in ILIAS Repository Trash Table

An authenticated SQL injection vulnerability in ILIAS allows users with write permissions to execute stacked queries, leading to unauthorized database access and potential account takeover.

ILIAS
1r 1t 1c
critical advisory

Critical Unauthenticated RCE in ILIAS via Insecure Deserialization

An unauthenticated remote code execution vulnerability (CVE-2026-80428) in ILIAS allows attackers to achieve arbitrary file writes and code execution by exploiting insecure deserialization within the Shibboleth logout-notification handler.

PoC ILIAS +2
1t 1c updated