Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-44903

SQL Injection can occur in the SirsiDynix Horizon Information Portal (IPAC20) through 3.25_9382; however, a patch is available from the vendor. This is in ipac.jsp in a SELECT WHERE statement, in a part of the uri= variable in the second part of the full= inner variable.

Published

2025-03-25T06:15:39.790

Last Modified

2025-03-27T16:45:46.410

Status

Awaiting Analysis

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-89
Affected Vendors & Products

-

References