agentprime: kohaEvery new CVE for koha.https://agentprime.io/CVE-2026-105107: Koha SQL injection in reports/cat_issues_top.pl via the Criteria, Filter and Limit request parametershttps://agentprime.io/advisories/CVE-2026-105107/https://agentprime.io/advisories/CVE-2026-105107/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 07:32:56 GMTCVECVE-2026-105106: Koha authenticated OS command injection in tools/scheduler.pl via the jobid parameter when deleting a scheduled taskhttps://agentprime.io/advisories/CVE-2026-105106/https://agentprime.io/advisories/CVE-2026-105106/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 07:23:03 GMTCVECVE-2026-19780: Koha Eval Code Injection Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-19780/https://agentprime.io/advisories/CVE-2026-19780/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 16:05:37 GMTCVECVE-2026-41921: Koha Stored XSS via Purchase Suggestion Handlerhttps://agentprime.io/advisories/CVE-2026-41921/https://agentprime.io/advisories/CVE-2026-41921/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 21:09:48 GMTCVECVE-2026-72610: Koha Community Koha - Stored SQL Injection via Patron lang Field in Issue Slip Generationhttps://agentprime.io/advisories/CVE-2026-72610/https://agentprime.io/advisories/CVE-2026-72610/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 11:22:47 GMTCVECVE-2026-72609: Koha Community Koha - SQL Injection via ORDER BY Direction in acqui/parcels.plhttps://agentprime.io/advisories/CVE-2026-72609/https://agentprime.io/advisories/CVE-2026-72609/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 11:22:44 GMTCVECVE-2026-72608: Koha Community Koha - Stored SQL Injection via Patron Card Layout image_namehttps://agentprime.io/advisories/CVE-2026-72608/https://agentprime.io/advisories/CVE-2026-72608/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 11:22:14 GMTCVECVE-2026-72607: Koha Community Koha - Stored SQL Injection via agefield in Automatic Item Modifications by Agehttps://agentprime.io/advisories/CVE-2026-72607/https://agentprime.io/advisories/CVE-2026-72607/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 11:22:12 GMTCVECVE-2026-71288: Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.plhttps://agentprime.io/advisories/CVE-2026-71288/https://agentprime.io/advisories/CVE-2026-71288/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 12:26:34 GMTCVECVE-2026-70373: Koha - SQL Injection in reports/issues_stats.plhttps://agentprime.io/advisories/CVE-2026-70373/https://agentprime.io/advisories/CVE-2026-70373/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Aug 2026 13:00:15 GMTCVECVE-2026-70372: Koha - SQL Injection in reports/bor_issues_top.plhttps://agentprime.io/advisories/CVE-2026-70372/https://agentprime.io/advisories/CVE-2026-70372/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Aug 2026 13:00:12 GMTCVECVE-2026-70371: Koha - SQL Injection in reports/issues_avg_stats.plhttps://agentprime.io/advisories/CVE-2026-70371/https://agentprime.io/advisories/CVE-2026-70371/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Aug 2026 13:00:10 GMTCVECVE-2026-70370: Koha - SQL Injection in reports/catalogue_stats.plhttps://agentprime.io/advisories/CVE-2026-70370/https://agentprime.io/advisories/CVE-2026-70370/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Aug 2026 13:00:07 GMTCVECVE-2026-70369: Koha - SQL Injection in reports/acquisitions_stats.plhttps://agentprime.io/advisories/CVE-2026-70369/https://agentprime.io/advisories/CVE-2026-70369/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Aug 2026 12:59:55 GMTCVECVE-2026-6428: Koha SQL Injection in reports/catalogue_out.pl via Filter URL Parameterhttps://agentprime.io/advisories/CVE-2026-6428/https://agentprime.io/advisories/CVE-2026-6428/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 13 Jun 2026 16:34:10 GMTCVECVE-2026-31844: Authenticated SQL Injection in Koha displayby parameter of suggestion.plhttps://agentprime.io/advisories/CVE-2026-31844/https://agentprime.io/advisories/CVE-2026-31844/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 06:34:14 GMTCVECVE-2025-30076: OS command injection in Kohahttps://agentprime.io/advisories/CVE-2025-30076/https://agentprime.io/advisories/CVE-2025-30076/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 16 Mar 2025 00:00:00 GMTCVECVE-2025-22954: SQL injection in Kohahttps://agentprime.io/advisories/CVE-2025-22954/https://agentprime.io/advisories/CVE-2025-22954/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.26 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Mar 2025 00:00:00 GMTCVEcriticalCVE-2023-5025: KOHA MARC search.pl cross site scriptinghttps://agentprime.io/advisories/CVE-2023-5025/https://agentprime.io/advisories/CVE-2023-5025/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 17 Sep 2023 07:00:07 GMTCVE