CVE-2024-28740

概要

参考情報

• febin0x4e4a.wordpress.com/2023/01/11/xss-vulnerability-in-koha-integrated-library-system · Exploit
• febin0x4e4a.wordpress.com/2024/03/07/xss-to-one-click-rce-in-koha-ils · Exploit

koha のその他の脆弱性

• CVE-2026-50767中 5.4A stored cross-site scripting (XSS) vulnerability in the item type administration page of Koha Library Management System 0 through 25.11 ver…
• CVE-2026-50766中 5.4A stored cross-site scripting (XSS) vulnerability in the OPAC item detail page of Koha Library Management System 0 through 25.11 versions al…
• CVE-2026-50765中 6.1A stored cross-site scripting (XSS) vulnerability in the patron restriction type administration page of Koha Library Management System 0 thr…
• CVE-2026-26379中 6.5Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configuration. This allows au…
• CVE-2026-26378中 5.4Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via file upload function in I…