high7.5
CVE-2024-44903
SQL Injection can occur in the SirsiDynix Horizon Information Portal (IPAC20) through 3.25_9382; however, a patch is available from the vendor.
Impact
SQL Injection can occur in the SirsiDynix Horizon Information Portal (IPAC20) through 3.25_9382; however, a patch is available from the vendor. This is in ipac.jsp in a SELECT WHERE statement, in a part of the uri= variable in the second part of the full= inner variable.
Affected products
| Product | Affected versions |
|---|---|
| SirsiDynix Horizon Information Portal (IPAC20) | through 3.25_9382 |
Versions were read from the advisory text. No structured product data has been published for this record yet.