CVE-2026-31844

HIGH

Koha Staff Interface - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2026-31844. PoCs published by XiaomingX, Mothra-1.

AI-analyzed exploit summary This repository contains a Python-based scanner for CVE-2026-31844, an authenticated SQL injection vulnerability in Koha Library Management System. The scanner uses a Boolean-Based Blind technique to detect the vulnerability without exploiting it.

Description

An authenticated SQL Injection vulnerability (CWE-89) exists in the Koha staff interface in the /cgi-bin/koha/suggestion/suggestion.pl endpoint due to improper validation of the displayby parameter used by the GetDistinctValues functionality. A low-privileged staff user can inject arbitrary SQL queries via crafted requests to this parameter, allowing execution of unintended SQL statements and exposure of sensitive database information. Successful exploitation may lead to full compromise of the backend database, including disclosure or modification of stored data.

Exploits (2)

github SCANNER 10 stars
by XiaomingX · pythonpoc
https://github.com/XiaomingX/data-cve-poc-py-v1/tree/main/2026/CVE-2026-31844

This repository contains a Python-based scanner for CVE-2026-31844, an authenticated SQL injection vulnerability in Koha Library Management System. The scanner uses a Boolean-Based Blind technique to detect the vulnerability without exploiting it.

Classification
Scanner 95%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: Koha Library Management System (versions before 24.11.12, 25.05.07, 25.11.01, 26.05.00)
Auth required
Prerequisites: Valid Koha staff account credentials with 'suggestions' permission · Access to the Koha staff interface
devstral-2 · analyzed Mar 12, 2026 Full analysis →
nomisec SCANNER
by Mothra-1 · poc
https://github.com/Mothra-1/CVE-2026-31844

This repository contains a scanner for CVE-2026-31844, an authenticated SQL injection vulnerability in Koha Library Management System. The scanner uses a Boolean-Based Blind technique to detect the vulnerability without exploiting it.

Classification
Scanner 95%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: Koha Library Management System (versions before 24.11.12, 25.05.07, 25.11.01, 26.05.00)
Auth required
Prerequisites: Valid credentials for a Koha staff account with 'suggestions' permission
devstral-2 · analyzed Mar 12, 2026 Full analysis →

References (3)

Core 3

Scores

CVSS v3 8.8
EPSS 0.0044
EPSS Percentile 35.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-89
Status published
Products (2)
koha/koha 25.11.00
koha/koha 24.11.0 - 24.11.12
Published Mar 11, 2026
Tracked Since Mar 11, 2026