CVE-2024-36058
The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST paramet...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter bib_list in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database.
Références
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web gitlab.com
- web gitlab.com
- web koha-community.org