Exposure of Koha

DMS

14

exposure score

817

sites use

0

exploited

1

critical

CVEs

6 results

CVE-2025-22954CRITICALGetLateOrMissingIssues in C4/Serials.pm in Koha before 24.11.02 allows SQL Injection in /serials/lateissues-export.pl via the supplierid or EPSS 23.2%CVE-2023-5025LOWKOHA MARC search.pl cross site scriptingEPSS 0.5%CVE-2018-25101LOWl2c2technologies Koha opac-MARCdetail.pl cross site scriptingEPSS 0.5%CVE-2026-31844HIGHAuthenticated SQL Injection in Koha displayby parameter of suggestion.plEPSS 0.4%CVE-2025-30076HIGHKoha before 24.11.02 allows admins to execute arbitrary commands via shell metacharacters in the tools/scheduler.pl report parameter.EPSS 0.4%CVE-2026-6428MEDIUMSQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.1EPSS 0.2%

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →