Yordam-Kutuphane-Otomasyonunda-Coklu-HTML-Enjeksiyonu

Yordam-图书馆自动化系统中的多重HTML注入 CVE-2026-77818 · CVSS 3.1 6.1（中危）· 网络安全局 · 发布日期 2026-09-04 · TR-26-1011 状态： 漏洞已在 v22.2 版本中修复。受影响的安装必须升级到 v22.2 或更高版本。 概述 Yordam 图书馆自动化系统是土耳其大学、公共和机构图书馆中广泛使用的商业图书馆自动化与在线目录（OPAC）软件。安装方式为本地部署（on-premise）；每个客户机构运行独立的副本。 在该产品的 v22.1 版本中，存在三个相互独立的 反射型 HTML...

CVE-2026-78377

URL redirection to untrusted site 'open redirect' vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Phishing. This issue affects Library Information and Document Automation...

CVE-2026-19733

Server-Side request forgery SSRF vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery. This issue affects Library Information and Document Automati...

CVE-2026-11838

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

CVE-2026-78377 Open Redirect in Yordam Informatics's Library Automation System

URL redirection to untrusted site 'open redirect' vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Phishing. This issue affects Library Information and Document Automation...

CVE-2026-78377

CVE-2026-78377 is an Open Redirect vulnerability in the Library Information and Document Automation Program by Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. The flaw allows URL redirection to an untrusted site, enabling phishing attacks. The af...

CVE-2026-78377 Open Redirect in Yordam Informatics's Library Automation System

URL redirection to untrusted site 'open redirect' vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Phishing. This issue affects Library Information and Document Automation...

CVE-2026-19733

CVE-2026-19733 is a Server-Side Request Forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting's Library Information and Document Automation Program , affecting versions before v22.2 . The vulnerability allows an unauthenticated remote attacker to forge server-side requests, res...

CVE-2026-19733 SSRF in Yordam Informatics's Library Automation System

Server-Side request forgery SSRF vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery. This issue affects Library Information and Document Automati...

CVE-2026-19733 SSRF in Yordam Informatics's Library Automation System

Server-Side request forgery SSRF vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery. This issue affects Library Information and Document Automati...

EUVD-2026-74782

Server-Side request forgery SSRF vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery. This issue affects Library Information and Document Automati...

CVE-2026-11838 Improper Authorization in Yordam Informatics' Library Reservation System

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

CVE-2026-11838

CVE-2026-11838 is a missing authentication vulnerability in the Library Reservation System developed by Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. The flaw allows input data manipulation in a critical function that lacks proper access contro...

CVE-2026-11838 Improper Authorization in Yordam Informatics' Library Reservation System

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

EUVD-2026-74781

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

PT-2026-88911

Server-Side request forgery SSRF vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery. This issue affects Library Information and Document Automati...

PT-2026-88910

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

CVE-2026-77818

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing. This issue affects...

CVE-2026-19727

CVE-2026-19727 is an XSS (targeting HTML attributes) vulnerability in the Yordam Information Technology Consulting Library Information and Document Automation Program , caused by improper neutralization of input during web page generation. The issue affects versions before v22.2 and is rated CVSS...

CVE-2026-19727 HTML Injection via Improper Input Sanitization in Yordam Informatics's Library Automation System

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes. This issu...