Bug 6518

Summary: XSS vulnerabilities in the OPAC
Product: Koha Reporter: Chris Cormack <chris>
Component: OPACAssignee: Owen Leonard <oleonard>
Status: CLOSED FIXED QA Contact: Bugs List <koha-bugs>
Severity: blocker    
Priority: PATCH-Sent (DO NOT USE) CC: arunet, paul.poulain
Version: Main   
Hardware: All   
OS: All   
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Attachments: Bug 6518 : XSS errors
Bug 6518 : Fixing XSS issues on opac

Description Chris Cormack 2011-06-19 10:04:05 UTC
Positive Technologies Research Team detects XSS in Koha Library Software.

The vulnerability was detected by Yuri Goltsev, Positive Technologies Research Lab
Comment 1 Chris Cormack 2011-06-19 10:04:54 UTC
Created attachment 4503 [details] [review]
Bug 6518 : XSS errors
Comment 2 Chris Cormack 2011-06-19 10:05:45 UTC
Created attachment 4504 [details] [review]
Bug 6518 : Fixing XSS issues on opac