Koha Multiple Security Vulnerabilities
BID:65448
Info
Koha Multiple Security Vulnerabilities
| Bugtraq ID: | 65448 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-1922 CVE-2014-1923 CVE-2014-1924 CVE-2014-1925 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 07 2014 12:00AM |
| Updated: | Feb 07 2014 12:00AM |
| Credit: | Chris Cormack, Galen Charlton, and John Lightsey |
| Vulnerable: |
Koha Library Software Community Koha 3.8.22 Koha Library Software Community Koha 3.14.2 Koha Library Software Community Koha 3.12.9 Koha Library Software Community Koha 3.10.12 |
| Not Vulnerable: |
Koha Library Software Community Koha 3.8.23 Koha Library Software Community Koha 3.14.3 Koha Library Software Community Koha 3.12.10 Koha Library Software Community Koha 3.10.13 |
Solution / Fix
Koha Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Koha Multiple Security Vulnerabilities
References:
References:
- Bug 11660 - tools/pdfViewer.pl is vulnerable to displaying the contents of an ar (Koha Library Software Community)
- Bug 11661 - edithelp.pl can be used to write arbitrary files to the server (Koha Library Software Community)
- Bug 11662 - member-picupload.pl can write to arbitrary files on the server (Koha Library Software Community)
- Bug 11666 - admin/import_export_framework.pl allows execution of arbitrary SQL w (Koha Library Software Community)
- Koha Homepage (Koha Library Software Community)
- Security release �?? February 2014 (Koha Library Software Community)