|
Description
Amit Gupta
2017-08-14 19:28:52 UTC
Created attachment 65975 [details] [review] Bug 19102 - XSS Flaws in circulation.pl 1. Hit /cgi-bin/koha/circ/circulation.pl?borrowernumber=xx<script>alert('amit')</script>. xx - is a borrowernumber 2. Notice the java script is executed. 4. Apply patch. 5. Reload page, and hit the page again /cgi-bin/koha/circ/circulation.pl?borrowernumber=xx<script>alert('amit')</script>. xx - is a borrowernumber. 6. Notice it is no longer executed. Created attachment 65976 [details] [review] Bug 19086 Fix XSS in routing-lists.pl 1. Hit /cgi-bin/koha/members/routing-lists.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 2. Notice java script is execute. 3. Apply patch. 4. Reload page, and hit the page again /cgi-bin/koha/members/routing-lists.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 5. Notice it is no longer executed. Created attachment 65977 [details] [review] Bug 19086 Fix XSS in readingrec.pl 1. Hit /cgi-bin/koha/members/readingrec.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 2. Notice java script is execute. 3. Apply patch. 4. Reload page, and hit the page again /cgi-bin/koha/members/readingrec.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 5. Notice it is no longer executed. Created attachment 65978 [details] [review] Bug 19102 Fix XSS in routing-lists.pl 1. Hit /cgi-bin/koha/members/routing-lists.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 2. Notice java script is execute. 3. Apply patch. 4. Reload page, and hit the page again /cgi-bin/koha/members/routing-lists.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 5. Notice it is no longer executed. Created attachment 65979 [details] [review] Bug 19102 Fix XSS in readingrec.pl 1. Hit /cgi-bin/koha/members/readingrec.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 2. Notice java script is execute. 3. Apply patch. 4. Reload page, and hit the page again /cgi-bin/koha/members/readingrec.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 5. Notice it is no longer executed. Created attachment 65980 [details] [review] Bug 19102 Fix XSS in notices.pl 1. Hit /cgi-bin/koha/members/notices.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 2. Notice java script is execute. 3. Apply patch. 4. Reload page, and hit the page again /cgi-bin/koha/members/notices.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 5. Notice it is no longer executed. Created attachment 65981 [details] [review] Bug 19102 Fix XSS in maninvoice.pl 1. Hit /cgi-bin/koha/members/maninvoice.pl?borrowernumber=xx<script>alert('amit')</script> xx is a borrowernumber 2. Notice java script is execute. 3. Apply patch. 4. Reload page, and hit the page again /cgi-bin/koha/members/maninvoice.pl?borrowernumber=xx<script>alert('amit')</script> xx is a borrowernumber 5. Notice it is no longer executed. Created attachment 65982 [details] [review] Bug 19102 Fix XSS in boraccount.pl 1. Hit /cgi-bin/koha/members/boraccount.pl?borrowernumber=xx<script>alert('amit')</script> xx is a borrowernumber 2. Notice java script is execute. 3. Apply patch. 4. Reload page, and hit the page again /cgi-bin/koha/members/boraccount.pl?borrowernumber=xx<script>alert('amity')</script> xx is a borrowernumber 5. Notice it is no longer executed. Created attachment 65983 [details] [review] Bug 19102 Fix XSS in mancredit.pl 1. Hit /cgi-bin/koha/members/mancredit.pl?borrowernumber=xx<script>alert('amit')</script> xx is a borrowernumber 2. Notice java script is execute. 3. Apply patch. 4. Reload page, and hit the page again /cgi-bin/koha/members/mancredit.pl?borrowernumber=xx<script>alert('amit')</script> xx is a borrowernumber 5. Notice it is no longer executed. Created attachment 66069 [details] [review] [SIGNED OFF] Bug 19102 - XSS Flaws in circulation.pl 1. Hit /cgi-bin/koha/circ/circulation.pl?borrowernumber=xx<script>alert('amit')</script>. xx - is a borrowernumber 2. Notice the java script is executed. 4. Apply patch. 5. Reload page, and hit the page again /cgi-bin/koha/circ/circulation.pl?borrowernumber=xx<script>alert('amit')</script>. xx - is a borrowernumber. 6. Notice it is no longer executed. Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Created attachment 66070 [details] [review] [SIGNED OFF] Bug 19102 Fix XSS in routing-lists.pl 1. Hit /cgi-bin/koha/members/routing-lists.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 2. Notice java script is execute. 3. Apply patch. 4. Reload page, and hit the page again /cgi-bin/koha/members/routing-lists.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 5. Notice it is no longer executed. Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Created attachment 66071 [details] [review] [SIGNED OFF] Bug 19102 Fix XSS in readingrec.pl 1. Hit /cgi-bin/koha/members/readingrec.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 2. Notice java script is execute. 3. Apply patch. 4. Reload page, and hit the page again /cgi-bin/koha/members/readingrec.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 5. Notice it is no longer executed. Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Created attachment 66072 [details] [review] [SIGNED OFF] Bug 19102 Fix XSS in notices.pl 1. Hit /cgi-bin/koha/members/notices.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 2. Notice java script is execute. 3. Apply patch. 4. Reload page, and hit the page again /cgi-bin/koha/members/notices.pl?borrowernumber=xx<script>alert('XSS Payload')</script> xx is a borrowernumber 5. Notice it is no longer executed. Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Created attachment 66073 [details] [review] [SIGNED OFF] Bug 19102 Fix XSS in maninvoice.pl 1. Hit /cgi-bin/koha/members/maninvoice.pl?borrowernumber=xx<script>alert('amit')</script> xx is a borrowernumber 2. Notice java script is execute. 3. Apply patch. 4. Reload page, and hit the page again /cgi-bin/koha/members/maninvoice.pl?borrowernumber=xx<script>alert('amit')</script> xx is a borrowernumber 5. Notice it is no longer executed. Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Created attachment 66074 [details] [review] [SIGNED OFF] Bug 19102 Fix XSS in boraccount.pl 1. Hit /cgi-bin/koha/members/boraccount.pl?borrowernumber=xx<script>alert('amit')</script> xx is a borrowernumber 2. Notice java script is execute. 3. Apply patch. 4. Reload page, and hit the page again /cgi-bin/koha/members/boraccount.pl?borrowernumber=xx<script>alert('amity')</script> xx is a borrowernumber 5. Notice it is no longer executed. Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Created attachment 66075 [details] [review] [SIGNED OFF] Bug 19102 Fix XSS in mancredit.pl 1. Hit /cgi-bin/koha/members/mancredit.pl?borrowernumber=xx<script>alert('amit')</script> xx is a borrowernumber 2. Notice java script is execute. 3. Apply patch. 4. Reload page, and hit the page again /cgi-bin/koha/members/mancredit.pl?borrowernumber=xx<script>alert('amit')</script> xx is a borrowernumber 5. Notice it is no longer executed. Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Why are we doing it here with HTML::Entities and are we editing templates on the other reports ? Needs feedback This has been solved by or prior bug 13618. |