April 2026 - Koha-bugs - lists.koha-community.org

[Bug 14423] [CVE-2015-4630][CVE-2015-4631] Multiple XSS and XSRF issues in Staff Client
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14423 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|[CVE-2015-4631] Multiple |[CVE-2015-4630][CVE-2015-46 |XSS and XSRF issues in |31] Multiple XSS and XSRF |Staff Client |issues in Staff Client -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 14423] [CVE-2015-4631] Multiple XSS and XSRF issues in Staff Client
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14423 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Multiple XSS and XSRF |[CVE-2015-4631] Multiple |issues in Staff Client |XSS and XSRF issues in | |Staff Client CC| |dcook(a)prosentient.com.au -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 14418] [CVE-2015-4631] XSS Flaws in OPAC Interface
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14418 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook(a)prosentient.com.au Summary|XSS Flaws in OPAC Interface |[CVE-2015-4631] XSS Flaws | |in OPAC Interface -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14408] [CVE-2015-4632] Path traversal vulnerabilty
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14408 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|Oldversions |--- David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Path traversal vulnerabilty |[CVE-2015-4632] Path | |traversal vulnerabilty CC| |dcook(a)prosentient.com.au -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 14412] [CVE-2015-4633] SQL Injection in OPAC Interface
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14412 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|Oldversions |--- David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|SQL Injection in OPAC |[CVE-2015-4633] SQL |Interface |Injection in OPAC Interface CC| |dcook(a)prosentient.com.au -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14426] [CVE-2015-4633] SQL Injection in Staff Client
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14426 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|Oldversions |--- David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook(a)prosentient.com.au Summary|SQL Injection in Staff |[CVE-2015-4633] SQL |Client |Injection in Staff Client -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 14416] [CVE-2015-4639] Stored XSS flaw affects OPAC and Staff interface
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14416 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Stored XSS flaw affects |[CVE-2015-4639] Stored XSS |OPAC and Staff interface |flaw affects OPAC and Staff | |interface CC| |dcook(a)prosentient.com.au -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 19117] [CVE-2018-1000669] paycollect.pl is vulnerable for CSRF attacks
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19117 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook(a)prosentient.com.au Summary|paycollect.pl is vulnerable |[CVE-2018-1000669] |for CSRF attacks |paycollect.pl is vulnerable | |for CSRF attacks -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 19086] [CVE-2018-1000670] Multiple cross-site scripting vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19086 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Multiple cross-site |[CVE-2018-1000670] Multiple |scripting vulnerabilities |cross-site scripting | |vulnerabilities CC| |dcook(a)prosentient.com.au -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 19319] [CVE-2018-25101] Reflected XSS Vulnerability in opac-MARCdetail.pl
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19319 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook(a)prosentient.com.au Summary|Reflected XSS Vulnerability |[CVE-2018-25101] Reflected |in opac-MARCdetail.pl |XSS Vulnerability in | |opac-MARCdetail.pl -- You are receiving this mail because: You are watching all bug changes.

1 0