CVE-2018-10428

Published: May 23, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in parameter handling, is vulnerable to various instances of reflected cross-site-scripting.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20180518 [SYSS-2018-007] ILIAS e-Learning - Reflected Cross-Site-Scripting

mailing-list

x_refsource_BUGTRAQ

http://packetstormsecurity.com/files/147726/ILIAS-5.3.2-5.2.14-5.1.25-Cross-Site-Scripting.html

x_refsource_MISC

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-007.txt

x_refsource_MISC

https://www.ilias.de/docu/ilias.php?ref_id=1719&from_page=116805&obj_id=116799&cmd=layout&cmdClass=illmpresentationgui&cmdNode=wc&baseClass=ilLMPresentationGUI

x_refsource_CONFIRM

https://www.ilias.de/docu/ilias.php?ref_id=1719&obj_id=116792&from_page=116805&cmd=layout&cmdClass=illmpresentationgui&cmdNode=wc&baseClass=ilLMPresentationGUI

x_refsource_CONFIRM

https://www.ilias.de/docu/ilias.php?ref_id=1719&from_page=116793&obj_id=116793&cmd=layout&cmdClass=illmpresentationgui&cmdNode=wc&baseClass=ilLMPresentationGUI

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-10428

Description

Affected Products

References