https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 17:12:16 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-07492 bdu:2023-07492 https://cve.radiocsirt.org/vuln/bdu:2023-07492 https://cve.radiocsirt.org/vuln/euvd-2026-163015 EUVD-2026-163015 https://cve.radiocsirt.org/vuln/euvd-2026-163015 https://cve.radiocsirt.org/vuln/fkie_cve-2023-45869 <p>ILIAS 7.25 (2023-09-12) allows any authenticated user to execute arbitrary operating system commands remotely, when a highly privileged account accesses an XSS payload. The injected commands are executed via the exec() function in the execQuoted() method of the ilUtil class (/Services/Utilities/classes/class.ilUtil.php) This allows attackers to inject malicious commands into the system, potentially compromising the integrity, confidentiality, and availability of the ILIAS installation and the underlying operating system.</p> <p>ILIAS 7.25 (2023-09-12) allows any authenticated user to execute arbitrary operating system commands remotely, when a highly privileged account accesses an XSS payload. The injected commands are executed via the exec() function in the execQuoted() method of the ilUtil class (/Services/Utilities/classes/class.ilUtil.php) This allows attackers to inject malicious commands into the system, potentially compromising the integrity, confidentiality, and availability of the ILIAS installation and the underlying operating system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-45869 https://cve.radiocsirt.org/vuln/ghsa-mj3h-wj8q-c86h <p>ILIAS 7.25 (2023-09-12) allows any authenticated user to execute arbitrary operating system commands remotely, when a highly privileged account accesses an XSS payload. The injected commands are executed via the exec() function in the execQuoted() method of the ilUtil class (/Services/Utilities/classes/class.ilUtil.php) This allows attackers to inject malicious commands into the system, potentially compromising the integrity, confidentiality, and availability of the ILIAS installation and the underlying operating system.</p> <p>ILIAS 7.25 (2023-09-12) allows any authenticated user to execute arbitrary operating system commands remotely, when a highly privileged account accesses an XSS payload. The injected commands are executed via the exec() function in the execQuoted() method of the ilUtil class (/Services/Utilities/classes/class.ilUtil.php) This allows attackers to inject malicious commands into the system, potentially compromising the integrity, confidentiality, and availability of the ILIAS installation and the underlying operating system.</p> https://cve.radiocsirt.org/vuln/ghsa-mj3h-wj8q-c86h https://cve.radiocsirt.org/vuln/gsd-2023-45869 gsd-2023-45869 https://cve.radiocsirt.org/vuln/gsd-2023-45869 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2739 <p>Ein authentisierter Angreifer kann mehrere Schwachstellen in ILIAS ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und beliebigen Programmcode auszuführen.</p> <p>Ein authentisierter Angreifer kann mehrere Schwachstellen in ILIAS ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2739