CVE-2014-2089

ILIAS 4.4.1 - RCE

Title source: llm

Description

ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a certain client_id pathname.

Exploits (1)

exploitdb WORKING POC
webappsphp
https://www.exploit-db.com/exploits/31833

Scores

EPSS 0.0532
EPSS Percentile 90.1%

Details

CWE
CWE-94
Status published
Products (1)
ilias/ilias 4.4.1
Published Mar 02, 2014
Tracked Since Feb 18, 2026