[Bug 42749] SQL injection in acqui/parcels.pl via the orderby parameter (ORDER BY direction) reaching C4::Acquisition::GetInvoices
3 Sep
2026
3 Sep
'26
2:52 p.m.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42749 --- Comment #10 from Sanjarbiy <sanjarbiy11@gmail.com> --- This has been assigned CVE-2026-72609. -- You are receiving this mail because: You are watching all bug changes.
12
Age (days ago)
12
Last active (days ago)
0 comments
1 participants
participants (1)
-
bugzilla-daemon@bugs.koha-community.org