OpenBiblio < 0.6.0 Multiple Vulnerabilities
High Nessus Network Monitor Plugin ID 4327
SynopsisThe remote host is missing a critical security patch or upgrade.
DescriptionAccording to its version number, the remote host is running a version of OpenBiblio that is vulnerable to a number of flaws.
OpenBiblio is an open-source, web-based library system. The vendor has released version 0.6.0 which addresses a number of flaws. An attacker exploiting these flaws would only require the ability to access the OpenBiblio web interface. Successful exploitation would allow the attacker to read confidential data and execute malicious code on the local server, database server and client browser.
SolutionUpgrade to version 0.6.0 or higher.