CVE-2026-82538 — ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter
ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is pass…
Published: 2026-09-04 · CVSS: 8.7 · CVSS 4.0
ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is passed directly into the ORDER BY clause of a SQL query without validation against declared sortable columns. Authenticated users with write permission on any container can inject arbitrary SQL through the sort parameter, and because multi-statement execution is enabled in the database layer, stacked queries enable full database read and write access as well as administrator account takeover.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7