The vulnerability of the upload-cover-image.pl component in the Koha library process automation software allows a hacker to read arbitrary files.

The vulnerability of the upload-cover-image.pl component in Koha library automation software is related to the lack of filtering for the path passed by the client. Exploiting this vulnerability allows a malicious actor to read arbitrary files remotely...

CVE-2023-44962

File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote attacker to read arbitrary files via the upload-cover-image.pl component...

CVE-2023-44962

File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote attacker to read arbitrary files via the upload-cover-image.pl component...

PT-2023-5947 · Unknown · Koha Library

Name of the Vulnerable Software and Affected Versions: Koha Library Software versions 23.05.04 and before Description: The issue is related to a lack of filtering of the client-supplied path in the upload-cover-image.pl component. This can allow a remote attacker to read arbitrary files. The...

WordPress plugin跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. The WordPress plugin suffers from a cross-site...

MDVA-2008:056 : rhythmbox

Amazon.com has removed support for the cover image fetching API used in rhythmbox. This updates to the new API to make cover image support work again. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. ...

Mandriva Update for rhythmbox MDVA-2008:056 (rhythmbox)

Check for the Version of rhythmbox OpenVAS Vulnerability Test Mandriva Update for rhythmbox MDVA-2008:056 rhythmbox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for rhythmbox MDVA-2008:056 (rhythmbox)

Check for the Version of rhythmbox OpenVAS Vulnerability Test Mandriva Update for rhythmbox MDVA-2008:056 rhythmbox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...