CVE-2023-5025

A vulnerability was found in KOHA up to 23.05.03. It has been declared as problematic. This vulnerability affects unknown code of the file /cgi-bin/koha/catalogue/search.pl of the component MARC. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239866 is the identifier assigned to this vulnerability.

• CWE-79

• https://vuldb.com/?ctiid.239866Third Party Advisory
• https://vuldb.com/?id.239866Third Party Advisory
• https://www.youtube.com/watch?v=b5107YkpgaMExploit, Third Party Advisory
• https://vuldb.com/?ctiid.239866Third Party Advisory
• https://vuldb.com/?id.239866Third Party Advisory
• https://www.youtube.com/watch?v=b5107YkpgaMExploit, Third Party Advisory

Published

Sep 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-50244Two stack-based buffer overflow vulnerabilities exist in the…7.2
• CVE-2023-50245OpenEXR-viewer is a viewer for OpenEXR files with detailed m…9.8
• CVE-2023-50246jq is a command-line JSON processor. Version 1.7 is vulnerab…5.5
• CVE-2023-50247h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and …7.5
• CVE-2023-50248CKAN is an open-source data management system for powering d…6.5
• CVE-2023-50249Sentry-Javascript is official Sentry SDKs for JavaScript. A …7.5
• CVE-2023-50250Cacti is an open source operational monitoring and fault man…6.1
• CVE-2023-50251php-svg-lib is an SVG file parsing / rendering library. Prio…7.5
• CVE-2023-50252php-svg-lib is an SVG file parsing / rendering library. Prio…9.8
• CVE-2023-50253Laf is a cloud development platform. In the Laf version desi…6.5
• CVE-2023-50254Deepin Linux's default document reader `deepin-reader` softw…7.8
• CVE-2023-50255Deepin-Compressor is the default archive manager of Deepin L…7.8