Security Advisory
CVE-2014-3719
9.8
CRITICAL
Vulnerability Description
Multiple SQL injection vulnerabilities in cgi-bin/review_m.cgi in Ex Libris ALEPH 500 (Integrated library management system) 18.1 and 20 allow remote attackers to execute arbitrary SQL commands via the (1) find, (2) lib, or (3) sid parameter.
Published Date
January 30, 2020
Official Source
NIST NVD Advisory