Approved changes feed: RSS · Atom

cpe:2.3:a:carenlove:online_public_access_catalog:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCarenlove (f6725207-84f8-5ce9-86c0-033ef68e76ea)
ProductOnline Public Access Catalog (33b9a37f-8804-5c3a-8361-6a3e5e806db7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10592 vulnerable 2026-06-08 07:02:27.132141 itsourcecode Online Public Access Catalog OPAC POST Parameter mysearch.php sql injection
MEDIUM (6.3)
A security vulnerability has been detected in itsourcecode Online Public Access Catalog OPAC 1.0. This impacts an unknown function of the file mysearch.php of the component POST Parameter Handler. Such manipulation of the argument search_field/search_text leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Published: 2025-09-17T13:02:06.965Z
Updated: 2025-09-17T14:01:25.881Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.