gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
23,111 Commits 39 Branches 720 Tags 6 GiB
Perl 44.2%
JavaScript 41.1%
HTML 6%
XSLT 3.1%
Vue 1.9%
Other 3.2%
Go to file
Chris b847e4e6d1 Bug 14423 : Multiple XSS bugs in suggestion.pl 
To test
1/ Hit a url like http://localhost:8081/cgi-bin/koha/suggestion/suggestion.pl?author=%22%3E%3Cscript%3Ealert%28%27oh%20noes%27%29%3C/script%3E&accepteddate_to=
2/ Notice alert box(es)
3/ Apply patch
4/ Reload and notice alert is gone

Repeat for
collection_title
copyrightdate
isbn
manageddate_from
manageddate_to
publishercode
suggesteddate_from
suggesteddate_to

Signed-off-by: Jonathan Druart <jonathan.druart@koha-community.org>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Liz Rea <wizzyrea@gmail.com>
 		2015-06-23 12:33:52 +12:00
C4 Bug 14408 Path Traversal error 2015-06-23 12:32:40 +12:00
Koha Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:36 +12:00
OpenILS Bug 9239 QA follow-up: remove stray debug code 2013-03-16 21:32:34 -04:00
acqui Bug 14047: Order z39.50 biblioservers in cataloguing 2015-06-08 14:16:51 +12:00
admin Bug 14042: Get rid of the home made pagination in the auth type admin 2015-05-18 09:46:31 +12:00
authorities Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:36 +12:00
basket Bug 14330: Remove unused email_sender from sendbasket/sendshelf 2015-06-16 10:18:41 +12:00
catalogue Bug 9978: (followup) Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:58 +12:00
cataloguing Bug 14047: Order z39.50 biblioservers in cataloguing 2015-06-08 14:16:51 +12:00
circ Bug 12066: New renew page in staff client doesn't record branch in statistics 2015-06-08 11:59:20 +12:00
course_reserves Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:36 +12:00
debian Bug 14203: Message for non-existent lang removal 2015-06-08 10:25:20 +12:00
docs Bug 9978: (followup) Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:58 +12:00
errors Bug 11349: Change .tmpl -> .tt in scripts using templates 2014-07-17 11:05:49 -03:00
etc Bug 13981 - Transliterate rule for oe and ae 2015-04-22 17:41:34 +12:00
install_misc Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:36 +12:00
installer Bug 14350: Missing statement in kohastructure.sql - DROP TABLE IF EXISTS borrower_sync 2015-06-19 15:11:42 +12:00
koha-tmpl Bug 14423 : Multiple XSS bugs in suggestion.pl 2015-06-23 12:33:52 +12:00
labels Bug 12911: batch_id for new labels batches can be asssigned to several batches 2015-05-18 09:55:48 +12:00
members Bug 13910: Prevent delete of one's own patron account 2015-05-18 10:57:11 +12:00
misc Bug 13815 - plack loose CGI qw(-utf8) flag creating incorrect utf-8 encoding everywhere 2015-06-16 09:21:14 +12:00
offline_circ Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:36 +12:00
opac Bug 14412 : SQL injection possible 2015-06-20 12:44:42 +12:00
patron_lists Bug 10565: (follow-up) add new user permission for patron list management 2013-10-14 22:43:03 +00:00
patroncards Bug 14122: Patron card: Software error when creating using borrower_number as parameter from URL 2015-05-17 17:50:22 +12:00
plugins Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:36 +12:00
reports Bug 14426: Escape or use placeholders for sql parameters 2015-06-23 12:33:39 +12:00
reserve Bug 8474: Holds done by librarians cause silent errors in koha-error_log, placerequest.pl -> $checkitem 2015-05-12 10:47:39 +12:00
reviews Bug 9978: (followup) Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:58 +12:00
rotating_collections Bug 9978: (followup) Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:58 +12:00
selenium
…
serials Bug 13423: Remove unused serials-recieve 2015-05-18 11:13:09 +12:00
services Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:36 +12:00
skel Bug 11078: Add locking to rebuild_zebra 2014-02-28 22:21:41 +00:00
sms Bug 11349: Change .tmpl -> .tt in scripts using templates 2014-07-17 11:05:49 -03:00
suggestion Bug 10752: Alert the librarian if the suggestion has not been added 2015-05-17 16:23:14 +12:00
svc Bug 14299: Today's checkouts not always sorting correctly 2015-06-16 09:12:16 +12:00
t Bug 14206: Adds test for getletter() call from overdue_notices.pl 2015-06-16 13:38:10 +12:00
tags Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:36 +12:00
test Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:36 +12:00
tmp/modified_authorities
…
tools Bug 14338: Unable to delete patron images 2015-06-16 13:23:34 +12:00
virtualshelves Bug 14330: Remove unused email_sender from sendbasket/sendshelf 2015-06-16 10:18:41 +12:00
xt Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:36 +12:00
.editorconfig Bug 12545: Add EditorConfig.org file to the source tree 2014-08-22 11:07:45 -03:00
.htaccess
…
.mailmap Bug 13314: Follow-up for m.de.rooy in .mailmap 2014-11-26 11:16:18 -03:00
INSTALL
…
INSTALL.debian
…
INSTALL.fedora7 Bug 11757: remove dependency on POE 2014-02-15 01:38:15 +00:00
INSTALL.opensuse Bug 11757: remove dependency on POE 2014-02-15 01:38:15 +00:00
INSTALL.ubuntu Bug 7764: (follow-up) editorial tweaks 2013-10-04 16:27:55 +00:00
LICENSE
…
MANIFEST.SKIP
…
Makefile.PL Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:36 +12:00
README
…
README.robots
…
about.pl Bug 14006: about.pl checks the wrong zebra index mode 2015-05-17 17:36:25 +12:00
changelanguage.pl Bug 9978: (followup) Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:58 +12:00
edithelp.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:36 +12:00
fix-perl-path.PL Bug 9978: (followup) Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:58 +12:00
help.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:36 +12:00
install-CPAN.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:36 +12:00
koha_perl_deps.pl bug 10548: fix count of missing required dependencies by koha_perl_deps.pl 2013-07-11 14:03:32 +00:00
kohaversion.pl Updating database to version 3.18.07.001 2015-06-15 11:04:44 +12:00
mainpage.pl Bug 11349: Change .tmpl -> .tt in scripts using templates 2014-07-17 11:05:49 -03:00
rewrite-config.PL Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-22 11:28:36 +12:00

README 

Koha is a free software integrated library system.

Koha is distributed under the GNU GPL version 3 or later.
Please read the file LICENSE for more details.

To install or upgrade Koha, please see the INSTALL file appropriate
to your platform.

Report bugs at http://bugs.koha-community.org/

Visit the Koha Project website at http://www.koha-community.org/