CVE-2024-36058

CVE-2024-36058 — Koha Library Software ID CVE: CVE-2024-36058 Producto: Koha Library Software Tipo de Vulnerabilidad: Inyección SQL Ciega Basada en Tiempo CWE-89 Puntuación CVSS: 8.1 Alta Autenticada Versiones Afectadas: Inferiores a 22.05.22 Créditos: Karolis Narvilas Descripción Koha es un...

CVE-2024-36058

The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter biblist in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database...

CVE-2024-36058

The Koha Library management system (versions prior to 22.05.22 and before 23.05.10 ) is vulnerable to a Time-Based Blind SQL Injection (CWE-89) in the Send Basket functionality. The root cause is the lack of sanitization for the bib_list POST parameter within the /cgi-bin/koha/opac-sendbasket.pl ...

CVE-2024-36058

The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter biblist in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database...

CVE-2024-36058

The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter biblist in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database...

PT-2026-30881

The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter bib list in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database...