ILIAS 4.4.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ilias:ilias:4.4.1:*:*:*:*:*:*:*

part: a version: 4.4.1 update: *

VendorIlias (b0abc309-2b9f-558c-8573-40078ab4e977)
ProductIlias (945b0908-3041-5078-87ec-52b51a8aea59)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/illias-eLearning/illias purl2cpe 2026-06-01 10:12:37.759126

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2090 vulnerable 2026-06-08 05:05:27.539569 Details available
Multiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) tar, (2) tar_val, or (3) title parameter.
Published: 2014-03-02T17:00:00.000Z
Updated: 2024-08-06T09:58:16.189Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2089 vulnerable 2026-06-08 05:05:27.539281 Details available
ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a certain client_id pathname.
Published: 2014-03-02T17:00:00.000Z
Updated: 2024-08-06T09:58:16.237Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2088 vulnerable 2026-06-08 05:05:27.538832 Details available
Unrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated users to execute arbitrary PHP code by using a .php filename in an upload_files action to the uploadFiles command, and then accessing the .php file via a direct request to a certain client_id pathname.
Published: 2014-03-02T17:00:00.000Z
Updated: 2024-08-06T09:58:16.212Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.