Bug 6518

Summary:	XSS vulnerabilities in the OPAC
Product:	Koha	Reporter:	Chris Cormack <chris>
Component:	OPAC	Assignee:	Owen Leonard <oleonard>
Status:	CLOSED FIXED	QA Contact:	Bugs List <koha-bugs>
Severity:	blocker
Priority:	PATCH-Sent (DO NOT USE)	CC:	arunet, paul.poulain
Version:	Main
Hardware:	All
OS:	All
Change sponsored?:	---	Patch complexity:	---
Documentation contact:		Documentation submission:
Text to go in the release notes:		Version(s) released in:
Circulation function:
Attachments:	Bug 6518 : XSS errors Bug 6518 : Fixing XSS issues on opac

Description Chris Cormack 2011-06-19 10:04:05 UTC

Positive Technologies Research Team detects XSS in Koha Library Software.

The vulnerability was detected by Yuri Goltsev, Positive Technologies Research Lab

Comment 1 Chris Cormack 2011-06-19 10:04:54 UTC

Created attachment 4503 [details] [review]
Bug 6518 : XSS errors

Comment 2 Chris Cormack 2011-06-19 10:05:45 UTC

Created attachment 4504 [details] [review]
Bug 6518 : Fixing XSS issues on opac