CVE-2022-45918

Description

References

• packetstormsecurity.com/files/170181/ILIAS-eLearning-7.15-Command-Injection-XSS-LFI-Open-Redirect.html · Exploit
• seclists.org/fulldisclosure/2022/Dec/7 · Exploit
• sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-ilias-elearning-platform · Third Party Advisory

More vulnerabilities in ilias

• CVE-2020-36944LOW 3.3ILIAS Learning Management System 4.3 contains a server-side request forgery vulnerability that allows attackers to read local files through …
• CVE-2025-11346CRITICAL 9.8A vulnerability has been found in ILIAS up to 8.23/9.13/10.1. This affects the function unserialize of the component Base64 Decoding Handler…
• CVE-2025-11345CRITICAL 9.8A flaw has been found in ILIAS up to 8.23/9.13/10.1. Affected by this issue is the function unserialize of the component Test Import. This m…
• CVE-2025-11344CRITICAL 9.8A vulnerability was detected in ILIAS up to 8.23/9.13/10.1. Affected by this vulnerability is an unknown functionality of the component Cert…
• CVE-2024-33529HIGH 7.2ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote authenticated attackers with administrative privileges to exec…