Skip to content
OpenAdvisories
High WID-SEC-2026-3783 2 CVEs

ILIAS: Mehrere Schwachstellen

Published Oct 6, 2026 · Updated Oct 11, 2026 · Revision 3 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in ILIAS ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsmechanismen zu umgehen, sowie Daten zu manipulieren oder offenzulegen.

Product

ILIAS ist eine Open Source e-Learning Lösung.

Vulnerabilities 2

  • High 8.8
    CVE-2026-107639

    ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename

    ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames. Attackers can embed tab-separated…

    ILIAS-eLearning e.V. ILIAS
  • High 8.8
    CVE-2026-108113

    ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import

    ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling (ilQtiMatImageSecurity) that allows authenticated authors to write executable files. Attackers with question pool import rights can imp…

    ILIAS-eLearning e.V. ILIAS

Revision history

  1. #3

    CVE's ergänzt

  2. #2

    CVE ergänzt

  3. #1

    Initiale Fassung

References