CVE-2014-1923

Multiple directory traversal vulnerabilities in the 1 staff interface help editor edithelp.pl or 2 member-picupload.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 allow remote attackers to write to arbitrary files via unspecified vectors...

CVE-2014-1923

CVE-2014-1923 affects Koha: 3.8.x prior to 3.8.23, 3.10.x prior to 3.10.13, 3.12.x prior to 3.12.10, and 3.14.x prior to 3.14.3. Two vulnerable components are the staff interface help editor (edithelp.pl) and member-picupload.pl. A remote attacker can write to arbitrary files via unspecified vect...