CVE-2024-44903

SQL Injection can occur in the SirsiDynix Horizon Information Portal IPAC20 through 3.259382; however, a patch is available from the vendor. This is in ipac.jsp in a SELECT WHERE statement, in a part of the uri= variable in the second part of the full= inner variable...

SirsiDynix Horizon SQL注入漏洞

SirsiDynix Horizon is an integrated library system from SirsiDynix. A security vulnerability exists in SirsiDynix Horizon 3.259382 and prior versions, which stems from a SQL injection in ipac.jsp and could lead to an attacker executing arbitrary code...

CVE-2024-44903

CVE-2024-44903 affects SirsiDynix Horizon Information Portal (IPAC20) up to version 3.25_9382. The vulnerability is a SQL injection in ipac.jsp within a SELECT WHERE statement in the uri= portion of the full= inner variable, leading to potential impact as described by the CVSS vector ( HIGH, NETW...