Vendor
high
advisory
SQL Injection in ILIAS Repository Trash Table
1 rule 1 TTP 1 CVEAn authenticated SQL injection vulnerability in ILIAS allows users with write permissions to execute stacked queries, leading to unauthorized database access and potential account takeover.
ILIAS
1r
1t
1c
critical
advisory
Critical Unauthenticated RCE in ILIAS via Insecure Deserialization
1 TTP 1 CVEAn unauthenticated remote code execution vulnerability (CVE-2026-80428) in ILIAS allows attackers to achieve arbitrary file writes and code execution by exploiting insecure deserialization within the Shibboleth logout-notification handler.
ILIAS +2
1t
1c
high
advisory
ILIAS: Multiple Vulnerabilities Identified by BSI
2 TTPsAn attacker can leverage several vulnerabilities within the ILIAS e-learning platform to bypass security controls, disclose sensitive information, and execute Cross-Site Scripting (XSS) attacks, potentially leading to unauthorized access, data compromise, and client-side code execution.
ILIAS
web-application
vulnerability
xss
information-disclosure
2t