Skip to content
OpenAdvisories

Product · Koha Community

Koha

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-31844 Public exploit

    Authenticated SQL Injection in Koha displayby parameter of suggestion.pl

    An authenticated SQL Injection vulnerability (CWE-89) exists in the Koha staff interface in the /cgi-bin/koha/suggestion/suggestion.pl endpoint due to improper validation of the displayby parameter used by the GetDistinctValues functionality. Successful explo…

    Koha Community Koha