---- Reported by email@example.com 2010-05-17 12:51:02 ----
serials/reorder_members.pl does not do an authentication check, thus allowing somebody to construct a URL to manipulate the order of members in a serials routing list without authorization.
---- Additional Comments From firstname.lastname@example.org 2010-05-19 09:27:12 ----
Created an attachment
--- Bug imported by email@example.com 2010-05-21 01:28 UTC ---
This bug was previously known as _bug_ 4517 at http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4517
Imported an attachment (id=2137)
Actual time not defined. Setting to 0.0
Setting qa contact to the default for this product.
This bug either had no qa contact or an invalid one.
The original submitter of attachment 2137 [details] [review] is unknown.
Reassigning to the person who moved it here: firstname.lastname@example.org.