Library Reservation System
Monthly
Input data manipulation is possible in the Yordam Informatics Library Reservation System before v22.2 due to a missing authentication check on a critical function (CWE-306), reachable over the network by low-privileged authenticated users. The flaw enables integrity violations - altering reservation records or system data - without requiring elevated privileges or user interaction. Reported by TR-CERT; no public exploit code or active exploitation has been identified at time of analysis.
Input data manipulation is possible in the Yordam Informatics Library Reservation System before v22.2 due to a missing authentication check on a critical function (CWE-306), reachable over the network by low-privileged authenticated users. The flaw enables integrity violations - altering reservation records or system data - without requiring elevated privileges or user interaction. Reported by TR-CERT; no public exploit code or active exploitation has been identified at time of analysis.