Approved changes feed: RSS · Atom

cpe:2.3:a:bywatersolutions:bywater-koha-xslt:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBywatersolutions (1555fcdb-125a-5e48-9b9b-3ddb3a0d3864)
ProductBywater Koha Xslt (591ba6e1-d465-5e9e-b810-03d49ce2a77f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/bywatersolutions/bywater-koha-xslt purl2cpe 2026-06-01 10:16:23.468762

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-10091 vulnerable 2026-06-08 05:06:24.656664 ByWater Solutions bywater-koha-xslt systempreferences.pl StringSearch sql injection
MEDIUM (4.7)
A vulnerability has been found in ByWater Solutions bywater-koha-xslt and classified as critical. This vulnerability affects the function StringSearch of the file admin/systempreferences.pl. The manipulation of the argument name leads to sql injection. The attack can be initiated remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The patch is identified as 9513b93c828dfbc4413f9e0df63647401aaf4e58. It is recommended to apply a patch to fix this issue. VDB-222322 is the identifier assigned to this vulnerability.
Published: 2023-03-06T04:00:05.571Z
Updated: 2024-08-06T08:58:26.372Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.