Koha Security Vulnerabilities and Issues — Koha CVE List

Lucene search

KohaKoha

4 matches found

CVE•added 2020/01/24 5:15 p.m.•47 views

CVE-2014-1925

SQL injection vulnerability in the MARC framework import/export function (admin/import_export_framework.pl) in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE...

9.8CVSS9.4AI score0.04079EPSS

CVE•added 2020/01/24 5:15 p.m.•46 views

CVE-2014-1924

The MARC framework import/export function (admin/import_export_framework.pl) in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 does not require authentication, which allows remote attackers to conduct SQL injection attacks via unspecified vectors.

9.8CVSS9.7AI score0.04079EPSS

CVE•added 2020/01/24 5:15 p.m.•45 views

CVE-2014-1922

Absolute path traversal vulnerability in tools/pdfViewer.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 allows remote attackers to read arbitrary files via unspecified vectors.

7.5CVSS7.8AI score0.0092EPSS

CVE•added 2020/01/24 5:15 p.m.•38 views

CVE-2014-1923

Multiple directory traversal vulnerabilities in the (1) staff interface help editor (edithelp.pl) or (2) member-picupload.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 allow remote attackers to write to arbitrary files via unspecified vectors.

7.5CVSS8.1AI score0.02419EPSS