2 matches found
CVE-2026-70369 Koha: SQL Injection in reports/acquisitions_stats.pl
Koha's reports/acquisitionsstats.pl builds its per-cell statistics query in sub calculate by interpolating the user-controlled Filter request parameters directly into WHERE fragments covering aqbasket.closedate, aqorders.datereceived, aqbooksellers.name, items.homebranch, items.ccode,...
8.8CVSS5.8AI score
SaveExploits0References7
CVE-2026-70369 Koha: SQL Injection in reports/acquisitions_stats.pl
Koha's reports/acquisitionsstats.pl builds its per-cell statistics query in sub calculate by interpolating the user-controlled Filter request parameters directly into WHERE fragments covering aqbasket.closedate, aqorders.datereceived, aqbooksellers.name, items.homebranch, items.ccode,...
5.8AI score0.00306EPSS
SaveExploits0References3
20