Researchers
Back
Anna Hartig
Researcher from
SEC Consult Vulnerability Lab
#11836
of 60,574
27.1
Total CVSS
Vulnerabilities
·
4
Medium
3
High
1
PT-2022-27683
2022-12-07
8.8
CVE-2022-45915
Ilias
Ilias
The issue allows for OS Command Injection.
PT-2022-27684
2022-12-07
5.4
CVE-2022-45916
Ilias
Ilias
The issue allows for cross-site scripting (XSS), which is a type of attack where an attacker can inject malicious scripts into a website.
PT-2022-27685
2022-12-07
6.5
CVE-2022-45918
Ilias
Ilias
The issue allows for external control of file name or path.
PT-2022-7073
2022-09-30
6.4
CVE-2022-45917
Ilias
Ilias
The issue is related to an open redirect in the `shib logout.php` script, specifically with the handling of the `return` parameter. This could allow a remote attacker to redirect users to an arbitrary URL.