Koha-bugs

Thread Start a new thread

Download

koha-bugs@lists.koha-community.org

June 2015

1 participants
1607 discussions

[Bug 14416] Stored XSS flaw affects OPAC and Staff interface
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '15

23 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14416 Chris Cormack <chris(a)bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |chris(a)bigballofwax.co.nz, | |m.de.rooy(a)rijksmuseum.nl Component|Reports |Lists -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14416] Stored XSS flaw affects OPAC and Staff interface
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '15

23 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14416 Chris Cormack <chris(a)bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|chris(a)bigballofwax.co.nz |gmcharlt(a)gmail.com Product|Koha security |Koha Component|Koha |Reports QA Contact| |testopia(a)bugs.koha-communit | |y.org Group|Koha security | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14423] Multiple XSS and XSRF issues in Staff Client
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '15

23 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14423 Chris Cormack <chris(a)bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |gmcharlt(a)gmail.com Version|unspecified |master Assignee|chris(a)bigballofwax.co.nz |koha-bugs(a)lists.koha-commun | |ity.org Group|Koha security | QA Contact| |testopia(a)bugs.koha-communit | |y.org Component|Koha |Staff Client Product|Koha security |Koha -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 14408] Path traversal vulnerabilty
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '15

23 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14408 Chris Cormack <chris(a)bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|chris(a)bigballofwax.co.nz |koha-bugs(a)lists.koha-commun | |ity.org QA Contact| |testopia(a)bugs.koha-communit | |y.org Group|Koha security | CC| |gmcharlt(a)gmail.com Version|unspecified |master Product|Koha security |Koha Component|Koha |Staff Client -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 14418] XSS Flaws in OPAC Interface
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '15

23 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14418 Chris Cormack <chris(a)bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Group|Koha security | QA Contact| |testopia(a)bugs.koha-communit | |y.org Assignee|chris(a)bigballofwax.co.nz |oleonard(a)myacpl.org Component|Koha |OPAC Product|Koha security |Koha Version|unspecified |master -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14412] SQL Injection in OPAC Interface
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '15

23 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14412 Chris Cormack <chris(a)bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Koha |OPAC QA Contact| |testopia(a)bugs.koha-communit | |y.org Assignee|chris(a)bigballofwax.co.nz |oleonard(a)myacpl.org Version|unspecified |master Group|Koha security | Product|Koha security |Koha -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14360] XSS Injection point
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '15

23 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14360 Chris Cormack <chris(a)bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Group|Koha security | Product|Koha security |Koha Component|Koha |OPAC -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14426] SQL Injection in Staff Client
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '15

23 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14426 Chris Cormack <chris(a)bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|chris(a)bigballofwax.co.nz |koha-bugs(a)lists.koha-commun | |ity.org Version|unspecified |master Group|Koha security | CC| |gmcharlt(a)gmail.com QA Contact| |testopia(a)bugs.koha-communit | |y.org Component|Koha |Staff Client Product|Koha security |Koha -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 14351] New: Remove given-when from opac-search.pl
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '15

23 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14351 Bug ID: 14351 Summary: Remove given-when from opac-search.pl Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: gmcharlt(a)gmail.com Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org given ($pathcode) { when ('"ads"') { $template->param('ReturnPath' => '/cgi-bin/koha/opac-search.pl?returntosearch=1'); } when ('"exs"') { $template->param('ReturnPath' => '/cgi-bin/koha/opac-search.pl?expanded_options=1&returntosearch=1'); } default {warn "ReturnPath swith error";} } -- You are receiving this mail because: You are watching all bug changes.

1 13

[Bug 9000] New: misc/cronjobs/rss/rss.pl uses HTP
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '15

23 Jun '15

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9000 Priority: P5 - low Change sponsored?: --- Bug ID: 9000 Assignee: gmcharlt(a)gmail.com Summary: misc/cronjobs/rss/rss.pl uses HTP Severity: enhancement Classification: Unclassified OS: All Reporter: jcamins(a)cpbibliography.com Hardware: All Status: NEW Version: master Component: Command-line Utilities Product: Koha The file check misc/cronjobs/rss/rss.pl uses HTML::Template::Pro. It should be converted to use Template::Toolkit, or, if it is a legacy script, removed. -- You are receiving this mail because: You are watching all bug changes.

1 42

Jump to page: