Poking on ILIAS

An ongoing series of writeups: I take the ILIAS learning platform apart and write down what comes out of it – approach, dead ends and findings. Testing happens exclusively on my own instances or with the operator’s express permission; nothing is published until reported flaws have been fixed.

The formal details of each finding – identifier, affected versions, disclosure status – are in the research overview and in the corresponding advisory.