Bug 7265 - [security] Local File Inclusion Vulnerability
Summary: [security] Local File Inclusion Vulnerability
Status: CLOSED DUPLICATE of bug 6629
Alias: None
Product: Koha
Classification: Unclassified
Component: Architecture, internals, and plumbing (show other bugs)
Version: 3.6
Hardware: All All
: P5 - low critical (vote)
Assignee: Galen Charlton
QA Contact: Ian Walls
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-11-25 05:24 UTC by Sébastien Marie
Modified: 2019-06-27 09:24 UTC (History)
0 users

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sébastien Marie 2011-11-25 05:24:58 UTC
An exploit has been published against LibLime Koha <= 4.2 on http://1337day.com/exploits/17246 .

After quick verification, koha 3.6.x is vulnerable (other version should be too).

As the exploit is public, this bug report is too.

Thanks.
Comment 1 Sébastien Marie 2011-11-25 05:35:18 UTC

*** This bug has been marked as a duplicate of bug 6629 ***