الباحثون
رجوع
Anna Hartig
باحث من
SEC Consult Vulnerability Lab
#11836
من 60,574
27.1
إجمالي CVSS
الثغرات
·
4
متوسطة
3
عالية
1
PT-2022-27683
2022-12-07
8.8
CVE-2022-45915
Ilias
Ilias
The issue allows for OS Command Injection.
PT-2022-27684
2022-12-07
5.4
CVE-2022-45916
Ilias
Ilias
The issue allows for cross-site scripting (XSS), which is a type of attack where an attacker can inject malicious scripts into a website.
PT-2022-27685
2022-12-07
6.5
CVE-2022-45918
Ilias
Ilias
The issue allows for external control of file name or path.
PT-2022-7073
2022-09-30
6.4
CVE-2022-45917
Ilias
Ilias
The issue is related to an open redirect in the `shib logout.php` script, specifically with the handling of the `return` parameter. This could allow a remote attacker to redirect users to an arbitrary URL.