gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Koha-clms/reports
History
Jonathan Druart e0eef13bf3
Bug 42735: Fix SQL injection 
This change fixes an SQL injection in the circulation stats.

Test plan:
0. Apply the patch
1. sudo koha-plack --restart kohadev
2. Go to /cgi-bin/koha/reports/issues_stats.pl
3. Try out a bunch of options
4. Try to break it
5. Note that you just get output and no errors

Signed-off-by: Sanjar Tulkinov Anvar o'g'li <sanjarbiy11@gmail.com>
Signed-off-by: Martin Renvoize <martin.renvoize@openfifth.co.uk>
 		2026-06-23 14:17:23 +00:00
..
acquisitions_stats.pl Bug 42360: [25.11] Move separator validation to C4::Context::csv_delimiter 2026-06-23 14:17:15 +00:00
bor_issues_top.pl Bug 42369: Use C4::Context::csv_delimiter for delimiter validation 2026-06-23 14:17:22 +00:00
borrowers_out.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
borrowers_stats.pl Bug 40287: Fix untranslatable strings in more statistics wizards 2026-01-16 15:54:33 +00:00
cash_register_stats.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
cat_issues_top.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
catalog_by_itemtype.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
catalogue_out.pl Bug 42361: Fix SQL injection in catalogue_out.pl 2026-06-08 16:16:09 +01:00
catalogue_stats.pl Bug 42363: Use C4::Context::csv_delimiter for delimiter validation 2026-06-23 14:17:17 +00:00
dictionary.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
guided_reports.pl Bug 42194: Fix redirect after sharing a report to Mana 2026-06-11 11:41:16 +00:00
issues_avg_stats.pl Bug 42368: Use C4::Context::csv_delimiter for delimiter validation 2026-06-23 14:17:20 +00:00
issues_stats.pl Bug 42735: Fix SQL injection 2026-06-23 14:17:23 +00:00
itemslost.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
orders_by_fund.pl Bug 40163: (follow-up) Fix wrong GNU links and update test 2025-09-24 09:25:04 -06:00
reports-home.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
reserves_stats.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
serials_stats.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00