CVE-2024-36058

CVE-2024-36058 — Koha Library Software CVE ID: CVE-2024-36058 Product: Koha Library Software Vulnerability Type: Time-Based Blind SQL Injection CWE-89 CVSS Score: 8.1 High Authenticated Affected Versions: Below 22.05.22 Credits: Karolis Narvilas Description Koha is an open-source integrated libra...

CVE-2024-36058

The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter biblist in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database...

PT-2026-30881

Name of the Vulnerable Software and Affected Versions Koha Library versions prior to 23.05.10 Description The Send Basket functionality is susceptible to Time-Based SQL Injection, a technique where an attacker sends a query that forces the database to wait for a specific amount of time before...

CVE-2024-36058

The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter biblist in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database...

CVE-2024-36058

The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter biblist in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database...

CVE-2024-36058

The Koha Library Management System is vulnerable to a Time-Based Blind SQL Injection (CWE-89) in the "Send Basket" functionality located at /cgi-bin/koha/opac-sendbasket.pl. The root cause is the failure to sanitize the bib_list POST parameter, which allows an attacker to inject arbitrary SQL pay...