Bug 6518 - XSS vulnerabilities in the OPAC
Summary: XSS vulnerabilities in the OPAC
Status: CLOSED FIXED
Alias: None
Product: Koha
Classification: Unclassified
Component: OPAC (show other bugs)
Version: Main
Hardware: All All
: PATCH-Sent (DO NOT USE) blocker
Assignee: Owen Leonard
QA Contact: Bugs List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-06-19 10:04 UTC by Chris Cormack
Modified: 2019-06-27 09:24 UTC (History)
2 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:

Attachments
Bug 6518 : XSS errors (6.33 KB, patch)
2011-06-19 10:04 UTC, Chris Cormack 		Details | Diff | Splinter Review
Bug 6518 : Fixing XSS issues on opac (5.71 KB, patch)
2011-06-19 10:05 UTC, Chris Cormack 		Details | Diff | Splinter Review
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Chris Cormack 2011-06-19 10:04:05 UTC 
Positive Technologies Research Team detects XSS in Koha Library Software.

The vulnerability was detected by Yuri Goltsev, Positive Technologies Research Lab
Comment 1 Chris Cormack 2011-06-19 10:04:54 UTC 
Created attachment 4503 [details] [review]
Bug 6518 : XSS errors
Comment 2 Chris Cormack 2011-06-19 10:05:45 UTC 
Created attachment 4504 [details] [review]
Bug 6518 : Fixing XSS issues on opac