Softver
koha
Aggregate across all detected versions
Ukupno hostova
0
distinct hosts
Versions Seen
0
Countries
0
Poznate CVE ranjivosti
24
known CVEs
Top države
No geolocated hosts.
Top ASN-ovi
No attributed hosts.
CVE podudaranja
| CVE | CVSS | Severity | Summary |
|---|---|---|---|
| CVE-2014-1924 | 9.8 | N/A | The MARC framework import/export function (admin/import_export_framework.pl) in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x bef... |
| CVE-2014-1925 | 9.8 | N/A | SQL injection vulnerability in the MARC framework import/export function (admin/import_export_framework.pl) in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x... |
| CVE-2015-4633 | 9.8 | N/A | Multiple SQL injection vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow (1) remote at... |
| CVE-2024-28740 | 9.6 | N/A | Cross Site Scripting vulnerability in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via the additonal-contents.pl component. |
| CVE-2015-4639 | 8.8 | N/A | Cross-site scripting (XSS) vulnerability in opac-addbybiblionumber.pl in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, and 3.20.x before 3.20.1 allows remo... |
| CVE-2018-1000669 | 8.8 | N/A | KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Request Forgery (CSRF) vulnerability in /cgi-bin/k... |
| CVE-2026-31844 | 8.8 | N/A | An authenticated SQL Injection vulnerability (CWE-89) exists in the Koha staff interface in the /cgi-bin/koha/suggestion/suggestion.pl endpoint due to improper... |
| CVE-2015-4630 | 8.0 | N/A | Multiple cross-site request forgery (CSRF) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1... |
| CVE-2024-24337 | 8.0 | N/A | CSV Injection vulnerability in '/members/moremember.pl' and '/admin/aqbudgets.pl' endpoints in Koha Library Management System version 23.05.05 and earlier allow... |
| CVE-2014-1922 | 7.5 | N/A | Absolute path traversal vulnerability in tools/pdfViewer.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 allows... |
| CVE-2014-1923 | 7.5 | N/A | Multiple directory traversal vulnerabilities in the (1) staff interface help editor (edithelp.pl) or (2) member-picupload.pl in Koha before 3.8.23, 3.10.x befor... |
| CVE-2015-4632 | 7.5 | N/A | Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote... |
| CVE-2024-28739 | 7.2 | N/A | An issue in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via a crafted script to the format parameter. |
| CVE-2026-26379 | 6.5 | N/A | Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configuration. This allows authenticated attacker... |
| CVE-2018-1000670 | 6.1 | N/A | KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Scripting (XSS) vulnerability in Multiple fields o... |
| CVE-2026-50765 | 6.1 | N/A | A stored cross-site scripting (XSS) vulnerability in the patron restriction type administration page of Koha Library Management System 0 through 25.11 versions... |
| CVE-2015-4631 | 5.4 | N/A | Multiple cross-site scripting (XSS) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow... |
| CVE-2026-26378 | 5.4 | N/A | Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via file upload function in Invoice features |
| CVE-2026-50766 | 5.4 | N/A | A stored cross-site scripting (XSS) vulnerability in the OPAC item detail page of Koha Library Management System 0 through 25.11 versions allow an authenticated... |
| CVE-2026-50767 | 5.4 | N/A | A stored cross-site scripting (XSS) vulnerability in the item type administration page of Koha Library Management System 0 through 25.11 versions allow an authe... |
| CVE-2026-26377 | 5.4 | N/A | Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function. |
| CVE-2011-4715 | 5.0 | MEDIUM | Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime Koha 4.2 and earlier allows remote atta... |
| CVE-2014-9446 | 4.3 | MEDIUM | Multiple cross-site scripting (XSS) vulnerabilities in the Staff client in Koha before 3.16.6 and 3.18.x before 3.18.2 allow remote attackers to inject arbitrar... |
| CVE-2023-5025 | 3.5 | N/A | A vulnerability was found in KOHA up to 23.05.03. It has been declared as problematic. This vulnerability affects unknown code of the file /cgi-bin/koha/catalog... |