Vulnerabilities

TI-2007-06304 CVE-2007-6608 · GHSA-r87c-3p93-7g76

Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier…

LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) LAST and (2) FIRST parameters to admin/staff_del_confirm.…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04572 Published 2007-12-31 No fix listed CWE-79

TI-2007-06303 CVE-2007-6607 · GHSA-gj2h-g779-4f94

OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain sensitive information…

LOW 27

OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain sensitive information via a direct request for (1) shared/footer.php, (2) circ/mbr_fields.php, or (3) admin/custom_marc_form_fields.php, which reveals t…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02224 Published 2007-12-31 No fix listed CWE-200

TI-2007-06302 CVE-2007-6606 · GHSA-wj5f-6rc3-83c9

OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain configuration…

LOW 26

OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01816 Published 2007-12-31 No fix listed CWE-200

TI-2007-01224 CVE-2007-1261 · GHSA-42m2-q6mg-4c6v

Unspecified vulnerability in the reports system in OpenBiblio before 0.6.0 allows…

LOW 35

Unspecified vulnerability in the reports system in OpenBiblio before 0.6.0 allows attackers to gain privileges via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01223 Published 2007-03-03 No fix listed CWE-264

TI-2006-04966 CVE-2006-5150 · GHSA-58p3-487m-vxww

SQL injection vulnerability in the reports system in OpenBiblio before 0.5.2 allows…

LOW 31

SQL injection vulnerability in the reports system in OpenBiblio before 0.5.2 allows remote attackers with report privileges to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01033 Published 2006-10-02 No fix listed

TI-2006-04965 CVE-2006-5149 · GHSA-3x4g-gq53-pcx7

Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote…

LOW 37

Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01997 Published 2006-10-02 No fix listed CWE-22