CVE-2022-0495
SQL Injection in KOHA
- State
- Published
- Severity
- 9.4 Critical
- Published
- Sep 21, 2022
- Updated
- May 20, 2026
- Reserved
- Feb 4, 2022
Description
The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.4 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L | TR-CERT |
Weaknesses
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected Products
| Product | Versions |
|---|---|
Parantez TeknolojiParantez Teknoloji |
|
References
- https://www.usom.gov.tr/bildirim/tr-22-0635government-resourcebroken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0635government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.