Learning Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:ilias:learning_management_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ilias (b0abc309-2b9f-558c-8573-40078ab4e977) |
|---|---|
| Product | Learning Management System (31acdf9e-0cbc-59db-909a-c74167c17d32) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-12789 |
vulnerable | 2026-07-29 00:23:32.602208 |
ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.php executeQueries sql injection
MEDIUM (4.7)
A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affects the function ilTrQuery::executeQueries of the file components/ILIAS/Tracking/classes/class.ilTrQuery.php of the component Learning Progress Tracking. Such manipulation of the argument troup_table_nav leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. It is suggested to upgrade the affected component. This issue was independently identified and fixed internally by the vendor's own security team ahead of this report.
Published: 2026-06-21T08:00:08.495Z
Updated: 2026-07-15T15:22:24.418Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.