CVE-2017-1000235 - I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised

CRITICAL

I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised

Published Nov 17, 2017

9.8

CRITICAL

CVSS 3.1

EPSS 3.24%

I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised.

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

Link	Providers	Tags
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170509-0_I_Librarian_Multiple_vulnerabilities_v10.txt		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Nov 17, 2017

Updated Sep 16, 2024

Reserved Nov 16, 2017

Updated n/a

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a