CVE-2011-4715

MEDIUM 5.0CVE-2011-4715 · Published 08/12/2011 · updated 16/06/2026

In short

CVE-2011-4715 is a MEDIUM (CVSS 5.0) vulnerability affecting koha (koha), liblime koha (koha).
Chance of exploitation in the next 30 days (EPSS): 8.6%, higher than 95.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
koha koha	`= 3.04.00= 3.04.01= 3.04.02= 3.04.03= 3.04.04= 3.04.05= 3.04.06= 3.06.00.000`	No fix yet
liblime koha koha	`≤ 4.2`	No fix yet

Description

Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime Koha 4.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the KohaOpacLanguage cookie to cgi-bin/opac/opac-main.pl, related to Output.pm.

References

koha-community.org/koha-3-4-7
koha-community.org/koha-3-6-1
osvdb.org/77322
secunia.com/advisories/46980 · Vendor Advisory
exploit-db.com/exploits/18153 · Exploit
securityfocus.com/bid/50812 · Exploit
vigasis.com/en · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/71478
liblime/LibLime-Koha commit 8ea6f7b

More vulnerabilities in koha

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

koha

= 3.04.00= 3.04.01= 3.04.02= 3.04.03= 3.04.04= 3.04.05= 3.04.06= 3.06.00.000

No fix yet

liblime koha

koha

≤ 4.2

No fix yet

More vulnerabilities in koha

See all →