medium6.1
CVE-2018-10307
error.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception.
Impact
error.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ilias | Ilias | from 5.2.0 before 5.3.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ILIAS-eLearning/ILIAS/commit/ca982e59d0b76c0374c9a7fd1acf2685ca57cf41
- https://www.ilias.de/docu/goto_docu_pg_116799_35.html
- https://github.com/ILIAS-eLearning/ILIAS/commit/ca982e59d0b76c0374c9a7fd1acf2685ca57cf41
- https://www.ilias.de/docu/goto_docu_pg_116799_35.html