Vulnerabilities > Galen Charlton

DATE CVE VULNERABILITY TITLE RISK
2014-01-26 CVE-2014-1626 Permissions, Privileges, and Access Controls vulnerability in Galen Charlton Marc-Xml 1.0/1.0.1
XML External Entity (XXE) vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used in Evergreen, Koha, perl4lib, and possibly other products, allows context-dependent attackers to read arbitrary files via a crafted XML file.
network
low complexity
galen-charlton CWE-264
5.0