cve/CVE-2024-28739.md at main - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-05-05 10:17:57 +00:00

0xMarcio 9dd9a4d134 Update CVE sources 2024-08-07 19:02

2024-08-07 19:02:05 +00:00

635 B

Raw Permalink Blame History

CVE-2024-28739

Description

An issue in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via a crafted script to the format parameter.

POC

Reference

https://febin0x4e4a.wordpress.com/2024/03/07/xss-to-one-click-rce-in-koha-ils/

Github

No PoCs found on GitHub currently.