From bugzilla-daemon@kohaorg.ec2.liblime.com Tue Nov  3 23:48:30 2009
From: bugzilla-daemon@kohaorg.ec2.liblime.com
To: koha-bugs@lists.koha-community.org
Subject: [Koha-bugs] [Bug 3759] XSS Exploit in Search Results.
Date: Tue, 03 Nov 2009 22:45:00 +0000
Message-ID: <E1N5S7Y-0003nH-Es@kohaorg.ec2.liblime.com>
In-Reply-To: <bug-3759-147@http.bugs.koha.org/cgi-bin/bugzilla3/>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0441669905959945733=="

--===============0441669905959945733==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3D3759


Mikhail Davidov <sirusdv@pwnzord.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |sirusdv@pwnzord.com




--=20
Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=
=3Demail
------- You are receiving this mail because: -------
You are watching all bug changes.

--===============0441669905959945733==--


From bugzilla-daemon@kohaorg.ec2.liblime.com Tue Nov  3 23:48:35 2009
From: bugzilla-daemon@kohaorg.ec2.liblime.com
To: koha-bugs@lists.koha-community.org
Subject: [Koha-bugs] [Bug 3759] New: XSS Exploit in Search Results.
Date: Tue, 03 Nov 2009 22:44:14 +0000
Message-ID: <bug-3759-147@http.bugs.koha.org/cgi-bin/bugzilla3/>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0125512667569512128=="

--===============0125512667569512128==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3D3759

           Summary: XSS Exploit in Search Results.
           Product: Koha
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: major
          Priority: P5
         Component: Searching
        AssignedTo: jmf@liblime.com
        ReportedBy: sirusdv@pwnzord.com
   Estimated Hours: 0.0
 Change sponsored?: ---


Example:
/cgi-bin/koha/opac-search.pl?q=3D<script>alert('meow')<%2Fscript>

Dangers:=20
http://cwe.mitre.org/data/definitions/79.html



Fix for 'en' attached. Should be changed in others as well.


--=20
Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=
=3Demail
------- You are receiving this mail because: -------
You are watching all bug changes.

--===============0125512667569512128==--


From bugzilla-daemon@kohaorg.ec2.liblime.com Tue Nov  3 23:48:58 2009
From: bugzilla-daemon@kohaorg.ec2.liblime.com
To: koha-bugs@lists.koha-community.org
Subject: [Koha-bugs] [Bug 3759] XSS Exploit in Search Results.
Date: Tue, 03 Nov 2009 22:46:35 +0000
Message-ID: <E1N5S95-0003p3-6M@kohaorg.ec2.liblime.com>
In-Reply-To: <bug-3759-147@http.bugs.koha.org/cgi-bin/bugzilla3/>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============8883689356018321896=="

--===============8883689356018321896==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3D3759





--- Comment #1 from Mikhail Davidov <sirusdv@pwnzord.com>  2009-11-03 22:46:3=
4 ---
Created an attachment (id=3D1235)
 --> (http://bugs.koha.org/cgi-bin/bugzilla3/attachment.cgi?id=3D1235)
.diff of ./htdocs/opac-tmpl/prog/en/includes/masthead.inc


--=20
Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=
=3Demail
------- You are receiving this mail because: -------
You are watching all bug changes.

--===============8883689356018321896==--


From bugzilla-daemon@kohaorg.ec2.liblime.com Wed Nov  4 23:54:44 2009
From: bugzilla-daemon@kohaorg.ec2.liblime.com
To: koha-bugs@lists.koha-community.org
Subject: [Koha-bugs] [Bug 3759] XSS Exploit in Search Results.
Date: Wed, 04 Nov 2009 22:53:28 +0000
Message-ID: <E1N5ojI-0007ke-W7@kohaorg.ec2.liblime.com>
In-Reply-To: <bug-3759-147@http.bugs.koha.org/cgi-bin/bugzilla3/>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1923979413045052255=="

--===============1923979413045052255==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3D3759


MJR <mjr@ttllp.co.uk> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mjr@ttllp.co.uk
             Status|NEW                         |RESOLVED
         Resolution|                            |DUPLICATE




--- Comment #2 from MJR <mjr@ttllp.co.uk>  2009-11-04 22:53:28 ---
This is only a fix for one instance.  I think a general fix is needed, probab=
ly
by changing the default escape to HTML.


*** This bug has been marked as a duplicate of bug 3652 ***


--=20
Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=
=3Demail
------- You are receiving this mail because: -------
You are watching all bug changes.

--===============1923979413045052255==--