181 matches found
CVE-2024-6050
CVE-2024-6050 Reflected XSS in SOWA OPAC Version: from 4.0 before 4.9.10, from 5.0 before 6.2.12. intext:"SOWA OPAC v." PoC https://domain/index.php?KatID=0&typ=repl&plnk=q&fauthor=XSS...
Yordam-Kutuphane-Otomasyonunda-Coklu-HTML-Enjeksiyonu
Multi-HTML-Injection-in-Yordam-Library-Automation CVE-2026-77818 · CVSS 3.1 6.1 Medium · Cybersecurity Presidency · Published 2026-09-04 · TR-26-1011 Status: The vulnerabilities have been fixed in version v22.2. Affected installations must be upgraded to v22.2 or later. Overview Yordam Library...
CVE-2026-50766
A stored cross-site scripting XSS vulnerability in the OPAC item detail page of Koha Library Management System 0 through 25.11 versions allow an authenticated remote attacker with edititems permission to inject arbitrary web scripts via the item public notes field items.itemnotes...
CVE-2026-50766
Koha Library Management System versions 0 through 25.11 are susceptible to a stored cross-site scripting (XSS) vulnerability in the OPAC item detail page . An authenticated remote attacker possessing edit_items permissions can inject arbitrary web scripts by exploiting the items.itemnotes (item p...
PT-2026-52982
Name of the Vulnerable Software and Affected Versions Koha Library Management System versions 0 through 25.11 Description A stored cross-site scripting XSS issue exists in the OPAC item detail page. An authenticated remote attacker with edit items permission can inject arbitrary web scripts throu...
CVE-2026-50766
A stored cross-site scripting XSS vulnerability in the OPAC item detail page of Koha Library Management System 0 through 25.11 versions allow an authenticated remote attacker with edititems permission to inject arbitrary web scripts via the item public notes field items.itemnotes...
CVE-2026-50766
A stored cross-site scripting XSS vulnerability in the OPAC item detail page of Koha Library Management System 0 through 25.11 versions allow an authenticated remote attacker with edititems permission to inject arbitrary web scripts via the item public notes field items.itemnotes...
CVE-2024-36058
The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter biblist in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database...
CVE-2024-36058
The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter biblist in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database...
CVE-2024-36058
The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter biblist in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database...
PT-2026-30881
Name of the Vulnerable Software and Affected Versions Koha Library versions prior to 23.05.10 Description The Send Basket functionality is susceptible to Time-Based SQL Injection, a technique where an attacker sends a query that forces the database to wait for a specific amount of time before...
CVE-2024-36058
The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter biblist in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database...
CVE-2024-36058
The Koha Library Management System is vulnerable to a Time-Based Blind SQL Injection (CWE-89) in the "Send Basket" functionality located at /cgi-bin/koha/opac-sendbasket.pl. The root cause is the failure to sanitize the bib_list POST parameter, which allows an attacker to inject arbitrary SQL pay...
CVE-2024-36058: Improper Neutralization of Special Elements used in an SQL Command
The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter biblist in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database...
PT-2025-55115
Уязвимость автоматизированной библиотечно-информационной системы OPAC-Global связана с ошибками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, оказать воздействие на конфиденциальность защищаемой информации...
PT-2025-55116
Уязвимость автоматизированной библиотечно-информационной системы OPAC-Global связана с несоответствием ответов на входящие запросы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, оказать воздействие на конфиденциальность защищаемой информации...
PT-2025-55114
Уязвимость автоматизированной библиотечно-информационной системы OPAC-Global связана с несоответствием ответов на входящие запросы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, оказать воздействие на конфиденциальность защищаемой информации...
OPAC-Global Access Control Compromise Data Compromise
The vulnerability of the automated library information system OPAC-Global is related to errors in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality of the protected information...
OPAC-Global Data Compromise
The vulnerability of the automated library information system OPAC-Global is related to inconsistencies in the responses to incoming queries. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality of the protected information...