CVE-2024-36058
The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST paramet...
Original description
The description as published by the source.
The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter bib_list in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database.
References
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web gitlab.com
- web gitlab.com
- web koha-community.org