CVE-2017-1000235

I, Librarian version =4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised...

CVE-2017-1000235

CVE-2017-1000235 affects Librarian versions 4.6 and earlier (including 4.7) with an OS command injection vulnerability in batchimport.php, allowing an attacker to fully compromise the web server. Root cause is command injection via batchimport.php; impact is complete compromise of confidentiality...