OpenBiblio < 0.6.0 Multiple Vulnerabilities

High Nessus Network Monitor Plugin ID 4327


The remote host is missing a critical security patch or upgrade.


According to its version number, the remote host is running a version of OpenBiblio that is vulnerable to a number of flaws.

OpenBiblio is an open-source, web-based library system. The vendor has released version 0.6.0 which addresses a number of flaws. An attacker exploiting these flaws would only require the ability to access the OpenBiblio web interface. Successful exploitation would allow the attacker to read confidential data and execute malicious code on the local server, database server and client browser.


Upgrade to version 0.6.0 or higher.

See Also

Plugin Details

Severity: High

ID: 4327

File Name: 4327.prm

Family: Web Servers

Published: 2007/12/28

Modified: 2017/01/31

Dependencies: 1442

Risk Information

Risk Factor: High


Base Score: 7.5

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C


Base Score: 7.3

Temporal Score: 6.8


Temporal Vector: CVSS3#E:F/RL:O/RC:C

Reference Information

CVE: CVE-2006-5149, CVE-2007-6606, CVE-2007-6607, CVE-2007-6608

BID: 27053