[Bug 42368] [CVE-2026-70371] SQL Injection in reports/issues_avg_stats.pl via the Filter request parameter (unvalidated string context, no placeholders)
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42368 David Cook <dcook@prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|SQL Injection in |[CVE-2026-70371] SQL |reports/issues_avg_stats.pl |Injection in |via the Filter request |reports/issues_avg_stats.pl |parameter (unvalidated |via the Filter request |string context, no |parameter (unvalidated |placeholders) |string context, no | |placeholders) -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon@bugs.koha-community.org