- Koha-bugs - lists.koha-community.org

[Bug 38961] [CVE-2024-12915] XSS in vendor search
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38961 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|XSS in vendor search |[CVE-2024-12915] XSS in | |vendor search -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38469] [CVE-2024-12915] Circulation returns vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38469 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Circulation returns |[CVE-2024-12915] |vulnerable to reflected XSS |Circulation returns | |vulnerable to reflected XSS -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 23093] New: Error during upgrade of OpacNavRight preference to Koha news
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23093 Bug ID: 23093 Summary: Error during upgrade of OpacNavRight preference to Koha news Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Tools Assignee: koha-bugs(a)lists.koha-community.org Reporter: oleonard(a)myacpl.org QA Contact: testopia(a)bugs.koha-community.org CC: testopia(a)bugs.koha-community.org Depends on: 22318 Target Milestone: --- Copied from Bug 22318: Moving the contents of OpacNavRight to opac_news fails due to improper (no?) escaping: DBD::mysql::db do failed: You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'http':'https';if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src=p+' at line 1 [for Statement "INSERT INTO opac_news (branchcode, lang, title, content ) VALUES (NULL, 'OpacNavRight_en', '', ' <a class="twitter-timeline" href="https://twitter.com/ETFLibrary" data-widget-id="702160486524186624">Tweets by @ETFLibrary</a> <script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0],p=/^http:/.test(d.location)?'http':'https';if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src=p+"://platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script> ')"] at /usr/share/koha/intranet/cgi-bin/installer/data/mysql/updatedatabase.pl line 18220. In this example, OpacNavRight contains a script to embed a Twitter timeline. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22318 [Bug 22318] Extend Koha news feature to include other content areas -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 14

[Bug 6629] [CVE-2011-4715] [security] insecure use of Cookie for language selection
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629 --- Comment #34 from David Cook <dcook(a)prosentient.com.au> --- I first heard Chris Cormack speak about Koha at Access 2011 in Vancouver Canada, and I remember him mentioning Frère Sébastien Marie providing a security patch during that talk. I'm going around adding CVE IDs to corresponding Bugzilla reports, so it's cool to come full circle like this! -- You are receiving this mail because: You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 6629] [CVE-2011-4715] [security] insecure use of Cookie for language selection
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|Oldversions |--- David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|[security] insecure use of |[CVE-2011-4715] [security] |Cookie for language |insecure use of Cookie for |selection |language selection CC| |dcook(a)prosentient.com.au -- You are receiving this mail because: You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 34761] [CVE-2023-5025] Stored/reflected XSS with searches and saved search filters
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34761 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Stored/reflected XSS with |[CVE-2023-5025] |searches and saved search |Stored/reflected XSS with |filters |searches and saved search | |filters -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11660] [CVE-2014-1922] tools/pdfViewer.pl is vulnerable to displaying the contents of an arbitrary file on the server
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

1 0

[Bug 11662] [CVE-2014-1923] member-picupload.pl can write to arbitrary files on the server
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11662 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|Oldversions |--- David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook(a)prosentient.com.au Summary|member-picupload.pl can |[CVE-2014-1923] |write to arbitrary files on |member-picupload.pl can |the server |write to arbitrary files on | |the server -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11661] [CVE-2014-1923] edithelp.pl can be used to write arbitrary files to the server
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11661 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|Oldversions |--- David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook(a)prosentient.com.au Summary|edithelp.pl can be used to |[CVE-2014-1923] edithelp.pl |write arbitrary files to |can be used to write |the server |arbitrary files to the | |server -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11666] [CVE-2014-1924][CVE-2014-1925] admin/import_export_framework.pl allows execution of arbitrary SQL without authentication
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

1 0