CVE-2014-2089

ILIAS 4.4.1 - Remote Code Execution

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2014-2089.

AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in ILIAS 4.4.1, including persistent XSS, arbitrary file upload leading to webshell deployment, and reflected XSS. It provides detailed HTTP requests for each vulnerability, showing how an attacker can achieve remote code execution (RCE) via file upload and execute arbitrary JavaScript via XSS.

Description

ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a certain client_id pathname.

Exploits (1)

exploitdb WORKING POC
webappsphp
https://www.exploit-db.com/exploits/31833

The exploit demonstrates multiple vulnerabilities in ILIAS 4.4.1, including persistent XSS, arbitrary file upload leading to webshell deployment, and reflected XSS. It provides detailed HTTP requests for each vulnerability, showing how an attacker can achieve remote code execution (RCE) via file upload and execute arbitrary JavaScript via XSS.

Classification
Working Poc 95%
Attack Type
Rce | Xss
Complexity
Trivial
Reliability
Reliable
Target: ILIAS 4.4.1
Auth required
Prerequisites: Admin or registered user credentials · Access to the ILIAS web interface
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (1)

Core 1

Scores

EPSS 0.0263
EPSS Percentile 83.5%

Details

CWE
CWE-94
Status published
Products (1)
ilias/ilias 4.4.1
Published Mar 02, 2014
Tracked Since Feb 18, 2026