April 2026 - Koha-bugs - lists.koha-community.org

[Bug 19086] [CVE-2018-1000670] Multiple cross-site scripting vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19086 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|koha-bugs(a)lists.koha-commun |chris(a)bigballofwax.co.nz |ity.org | -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 14416] [CVE-2015-4639] Stored XSS flaw affects OPAC and Staff interface
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14416 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|gmcharlt(a)gmail.com |chris(a)bigballofwax.co.nz -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14426] [CVE-2015-4633] SQL Injection in Staff Client
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14426 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|koha-bugs(a)lists.koha-commun |jonathan.druart(a)gmail.com |ity.org | -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 14412] [CVE-2015-4633] SQL Injection in OPAC Interface
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14412 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|oleonard(a)myacpl.org |chris(a)bigballofwax.co.nz -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14408] [CVE-2015-4632] Path traversal vulnerabilty
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14408 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|koha-bugs(a)lists.koha-commun |chris(a)bigballofwax.co.nz |ity.org | -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 13425] [CVE-2014-9446] There is an xss vulnerability in 3.16, 3.18 and master in the opac and intranet facets
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13425 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|gmcharlt(a)gmail.com |chris(a)bigballofwax.co.nz -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14418] [CVE-2015-4631] XSS Flaws in OPAC Interface
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14418 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|oleonard(a)myacpl.org |chris(a)bigballofwax.co.nz -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14423] [CVE-2015-4630][CVE-2015-4631] Multiple XSS and XSRF issues in Staff Client
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14423 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|koha-bugs(a)lists.koha-commun |chris(a)bigballofwax.co.nz |ity.org | -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 11661] [CVE-2014-1923] edithelp.pl can be used to write arbitrary files to the server
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11661 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|gmcharlt(a)gmail.com |chris(a)bigballofwax.co.nz -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11660] [CVE-2014-1922] tools/pdfViewer.pl is vulnerable to displaying the contents of an arbitrary file on the server
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11660 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|gmcharlt(a)gmail.com |chris(a)bigballofwax.co.nz -- You are receiving this mail because: You are watching all bug changes.

1 0