CVE-2025-30076

Koha before 24.11.02 allows admins to execute arbitrary commands via shell metacharacters in the tools/scheduler.pl report parameter...

CVE-2025-22954

Koha vulnerability CVE-2025-22954 affects Koha before 24.11.02. The issue is in GetLateOrMissingIssues within C4/Serials.pm, triggered by the lateissues-export.pl script via supplierid or serialid parameters, enabling SQL injection. The exploitation path is documented in PoC materials (e.g., a Gi...