- Koha-bugs - lists.koha-community.org

[Bug 11661] [CVE-2014-1923] edithelp.pl can be used to write arbitrary files to the server
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11661 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|Oldversions |--- David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook(a)prosentient.com.au Summary|edithelp.pl can be used to |[CVE-2014-1923] edithelp.pl |write arbitrary files to |can be used to write |the server |arbitrary files to the | |server -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11666] [CVE-2014-1924][CVE-2014-1925] admin/import_export_framework.pl allows execution of arbitrary SQL without authentication
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

1 0

[Bug 11666] [CVE-2014-1925] admin/import_export_framework.pl allows execution of arbitrary SQL without authentication
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

1 0

[Bug 13425] [CVE-2014-9446] There is an xss vulnerability in 3.16, 3.18 and master in the opac and intranet facets
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13425 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|Oldversions |--- David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook(a)prosentient.com.au Summary|There is an xss |[CVE-2014-9446] There is an |vulnerability in 3.16, 3.18 |xss vulnerability in 3.16, |and master in the opac and |3.18 and master in the opac |intranet facets |and intranet facets -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14521] [CVE-2015-10091] SQL injection in local use system preferences
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14521 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|Oldversions |--- David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|SQL injection in local use |[CVE-2015-10091] SQL |system preferences |injection in local use | |system preferences -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14423] [CVE-2015-4630][CVE-2015-4631] Multiple XSS and XSRF issues in Staff Client
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14423 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|[CVE-2015-4631] Multiple |[CVE-2015-4630][CVE-2015-46 |XSS and XSRF issues in |31] Multiple XSS and XSRF |Staff Client |issues in Staff Client -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 14423] [CVE-2015-4631] Multiple XSS and XSRF issues in Staff Client
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14423 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Multiple XSS and XSRF |[CVE-2015-4631] Multiple |issues in Staff Client |XSS and XSRF issues in | |Staff Client CC| |dcook(a)prosentient.com.au -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 14418] [CVE-2015-4631] XSS Flaws in OPAC Interface
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14418 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook(a)prosentient.com.au Summary|XSS Flaws in OPAC Interface |[CVE-2015-4631] XSS Flaws | |in OPAC Interface -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14408] [CVE-2015-4632] Path traversal vulnerabilty
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14408 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|Oldversions |--- David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Path traversal vulnerabilty |[CVE-2015-4632] Path | |traversal vulnerabilty CC| |dcook(a)prosentient.com.au -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 14412] [CVE-2015-4633] SQL Injection in OPAC Interface
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '26

09 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14412 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|Oldversions |--- David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|SQL Injection in OPAC |[CVE-2015-4633] SQL |Interface |Injection in OPAC Interface CC| |dcook(a)prosentient.com.au -- You are receiving this mail because: You are watching all bug changes.

1 0