2 matches found
CVE-2026-70369 Koha - SQL Injection in reports/acquisitions_stats.pl
Koha's reports/acquisitionsstats.pl builds its per-cell statistics query in sub calculate by interpolating the user-controlled Filter request parameters directly into WHERE fragments covering aqbasket.closedate, aqorders.datereceived, aqbooksellers.name, items.homebranch, items.ccode,...
8.8CVSS5.3AI score
SaveExploits0References7
CVE-2026-70369 Koha - SQL Injection in reports/acquisitions_stats.pl
Koha's reports/acquisitionsstats.pl builds its per-cell statistics query in sub calculate by interpolating the user-controlled Filter request parameters directly into WHERE fragments covering aqbasket.closedate, aqorders.datereceived, aqbooksellers.name, items.homebranch, items.ccode,...
8.8CVSS5.2AI score0.00306EPSS
SaveExploits0References3
20