311 matches found
CVE-2018-25101 l2c2technologies Koha opac-MARCdetail.pl cross site scripting
A vulnerability, which was classified as problematic, has been found in l2c2technologies Koha up to 20180108. This issue affects some unknown processing of the file /cgi-bin/koha/opac-MARCdetail.pl. The manipulation of the argument biblionumber with the input 2" leads to cross site scripting. The...
Koha 跨站脚本漏洞
Koha is a Koha organization's system for automated library management building. A cross-site scripting vulnerability exists in Koha 20180108 and earlier versions, which stems from a cross-site scripting XSS vulnerability in the file /cgi-bin/koha/opac-MARCdetail.pl...
CVE-2024-24336
A multiple Cross-site scripting XSS vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and...
CVE-2024-24336
A multiple Cross-site scripting XSS vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and...
CVE-2024-24336
CVE-2024-24336 describes a multiple XSS vulnerability in Koha Library Management System (versions 23.05.05 and earlier) affecting the endpoints /members/moremember.pl and /members/members-home.pl. The underlying issue allows malicious staff users to perform CSRF actions that can change usernames ...
Koha Library Management System Cross-Site Scripting Vulnerability
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Individual Developer. A cross-site scripting vulnerability exists in Koha Library Management System version 23.05.05 and earlier, which stems from a cross-site...
PT-2024-20369 · Unknown · Library Management System
Name of the Vulnerable Software and Affected Versions: Koha Library Management System versions 23.05.05 and earlier Description: A multiple Cross-site scripting XSS vulnerability in the "/members/moremember.pl" and "/members/members-home.pl" endpoints allows malicious staff users to carry out CSR...
CVE-2024-24336
A multiple Cross-site scripting XSS vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and...
CVE-2024-24337
CSV Injection vulnerability in '/members/moremember.pl' and '/admin/aqbudgets.pl' endpoints in Koha Library Management System version 23.05.05 and earlier allows attackers to to inject DDE commands into csv exports via the 'Budget' and 'Patrons Member' components...
Input validation
CSV Injection vulnerability in '/members/moremember.pl' and '/admin/aqbudgets.pl' endpoints in Koha Library Management System version 23.05.05 and earlier allows attackers to to inject DDE commands into csv exports via the 'Budget' and 'Patrons Member' components...
CVE-2024-24337
CSV Injection vulnerability in '/members/moremember.pl' and '/admin/aqbudgets.pl' endpoints in Koha Library Management System version 23.05.05 and earlier allows attackers to to inject DDE commands into csv exports via the 'Budget' and 'Patrons Member' components...
Library Management System Security Vulnerability
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability in Koha Library Management System version 23.05.05 and earlier, which originates in the /members/moremember.pl and...
CVE-2024-24337
CSV Injection vulnerability in '/members/moremember.pl' and '/admin/aqbudgets.pl' endpoints in Koha Library Management System version 23.05.05 and earlier allows attackers to to inject DDE commands into csv exports via the 'Budget' and 'Patrons Member' components...
CVE-2024-24337
CSV Injection vulnerability in '/members/moremember.pl' and '/admin/aqbudgets.pl' endpoints in Koha Library Management System version 23.05.05 and earlier allows attackers to to inject DDE commands into csv exports via the 'Budget' and 'Patrons Member' components...
CVE-2024-24337
CVE-2024-24337 affects Koha Library Management System
PT-2024-3869 · Unknown · Library Management System
Name of the Vulnerable Software and Affected Versions: Koha Library Management System versions 23.05.05 and earlier Description: The issue is related to a lack of neutralization of elements in a CSV file, affecting the components members/moremember.pl and admin/aqbudgets.pl. This allows a remote...
The vulnerability of the upload-cover-image.pl component in the Koha library process automation software allows a hacker to read arbitrary files.
The vulnerability of the upload-cover-image.pl component in Koha library automation software is related to the lack of filtering for the path passed by the client. Exploiting this vulnerability allows a malicious actor to read arbitrary files remotely...
CVE-2023-44961
SQL Injection vulnerability in Koha Library Software 23.0.5.04 and before allows a remote attacker to obtain sensitive information via the intranet/cgi bin/cataloging/ysearch.pl. component...
