SQL Injection vulnerability in Koha Library Software 23.0.5.04 and before allows a remote attacker to obtain sensitive information via the intranet/cgi bin/cataloging/ysearch.pl. component.
CPE | Name | Operator | Version |
---|---|---|---|
koha_library_software | le | 23.05.04 |