Bug 7265

Summary: [security] Local File Inclusion Vulnerability
Product: Koha Reporter: Sébastien Marie <semarie>
Component: Architecture, internals, and plumbingAssignee: Galen Charlton <gmcharlt>
Status: CLOSED DUPLICATE QA Contact: Ian Walls <koha.sekjal>
Severity: critical    
Priority: P5 - low    
Version: 3.6   
Hardware: All   
OS: All   
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:

Description Sébastien Marie 2011-11-25 05:24:58 UTC
An exploit has been published against LibLime Koha <= 4.2 on http://1337day.com/exploits/17246 .

After quick verification, koha 3.6.x is vulnerable (other version should be too).

As the exploit is public, this bug report is too.

Thanks.
Comment 1 Sébastien Marie 2011-11-25 05:35:18 UTC

*** This bug has been marked as a duplicate of bug 6629 ***