CVE-2023-5025 KOHA MARC search.pl cross site scripting

A vulnerability was found in KOHA up to 23.05.03. It has been declared as problematic. This vulnerability affects unknown code of the file /cgi-bin/koha/catalogue/search.pl of the component MARC. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has...

KOHA Cross-Site Scripting Vulnerability

KOHA is a library automation system product by Parantez Teknoloji Individual Developer A cross-site scripting vulnerability exists in KOHA version 23.05.03 and earlier, which stems from a cross-site scripting XSS vulnerability in the component MARC...

PT-2023-31508 · Koha · Koha

Name of the Vulnerable Software and Affected Versions: Koha versions up to 23.05.03 Description: A problem has been identified that affects the MARC component, specifically the /cgi-bin/koha/catalogue/search.pl file. This issue can lead to cross-site scripting and can be initiated remotely...

CVE-2023-5025: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in KOHA up to 23.05.03. It has been declared as problematic. This vulnerability affects unknown code of the file /cgi-bin/koha/catalogue/search.pl of the component MARC. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has...

CVE-2015-10091

Affected product: ByWater Solutions bywater-koha-xslt. Vulnerable component: StringSearch function in admin/systempreferences.pl. Root cause: input of the name parameter enables SQL injection. Impact: remote attack possible; no specific versions are detailed in the sources. Known remediation: pat...

CVE-2015-10091 ByWater Solutions bywater-koha-xslt systempreferences.pl StringSearch sql injection

A vulnerability has been found in ByWater Solutions bywater-koha-xslt and classified as critical. This vulnerability affects the function StringSearch of the file admin/systempreferences.pl. The manipulation of the argument name leads to sql injection. The attack can be initiated remotely...

ByWater Solutions bywater-koha-xslt SQL注入漏洞

ByWater Solutions bywater-koha-xslt is ByWater Solutions' Koha repository for XSLT customization for ByWater partners. ByWater Solutions bywater-koha-xslt suffers from a SQL injection vulnerability that stems from manipulation of the parameter name that can lead to sql injection...

CVE-2015-10091: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in ByWater Solutions bywater-koha-xslt and classified as critical. This vulnerability affects the function StringSearch of the file admin/systempreferences.pl. The manipulation of the argument name leads to sql injection. The attack can be initiated remotely...

CVE-2022-0495

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01...

CVE-2022-0495

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01...

Sql injection

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01...

CVE-2022-0495 SQL Injection in KOHA

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01...

CVE-2022-0495 SQL Injection in KOHA

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01...

CVE-2022-0495

Summary: CVE-2022-0495 affects KOHA by Parantez Teknoloji prior to version 19.05.03 and is an unauthenticated SQL Injection vulnerability. The issue is fixed in version 19.05.03.01. Affected software: KOHA library automation system (Parantez Teknoloji). Vulnerability details (as provided): unauth...

CVE-2022-0495

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01...

KOHA SQL注入漏洞

KOHA is a library automation system product by Parantez Teknoloji Individual Developer A security vulnerability exists in Parantez Teknoloji KOHA versions prior to 19.05.03, which stems from the presence of unverified SQL injection...

CVE-2022-0495: Improper Neutralization of Special Elements used in an SQL Command

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01...

PT-2022-13213

Name of the Vulnerable Software and Affected Versions KOHA versions prior to 19.05.03 Description The library automation system product KOHA developed by Parantez Teknoloji has an unauthenticated SQL Injection vulnerability. This issue has been fixed in version 19.05.03.01. Recommendations For...

Koha Detection (HTTP)

HTTP based detection of Koha Library Software. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

koha.1045719.n5.nabble.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1183762 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...