CVE-2014-1924

critical

Description

The MARC framework import/export function (admin/import_export_framework.pl) in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 does not require authentication, which allows remote attackers to conduct SQL injection attacks via unspecified vectors.

References

Advisories
More

http://www.openwall.com/lists/oss-security/2014/02/10/3

http://www.openwall.com/lists/oss-security/2014/02/07/10

http://koha-community.org/security-release-february-2014/

Details

Source: Mitre, NVD

Published: 2020-01-24

Updated: 2020-01-30

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.04079