gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
21,785 Commits 39 Branches 720 Tags 6 GiB
Perl 44.2%
JavaScript 41.1%
HTML 6%
XSLT 3.1%
Vue 1.9%
Other 3.2%
Go to file
Chris d5421fc0df Bug 14423 XSS bug in auth_subfields_structure 
1/ Hit a url like http://localhost:8081/cgi-bin/koha/admin/auth_subfields_structure.pl?op=add_form&authtypecode=%27%3Cscript%3Ealert%28%27oh%20noes%27%29%3C/script%3E&tagfield=%22/%3E%3Cscript%3Ealert%28%27oh%20noes%27%29%3C/script%3E
2/ Notice a ton of alert boxes pop up
3/ Apply patch
4/ Reload url, no longer get any alerts
5/ Test fuctionality still works

Signed-off-by: Mason James <mtj@kohaaloha.com>
 		2015-06-23 15:30:08 +12:00
C4 Bug 14408 Path traversal vulnerability 2015-06-22 05:43:54 +12:00
Koha Bug 13645: Cache the DBIx connection 2015-05-29 17:53:40 +12:00
OpenILS Bug 9239 QA follow-up: remove stray debug code 2013-03-16 21:32:34 -04:00
acqui Bug 12323 [SIGNED OFF] - Acquisitions search results fixed in order of biblionumber 2015-02-26 17:41:19 +13:00
admin Bug 13401 - sort branches alphabetically in admin/authorised_values.pl 2015-02-26 17:28:14 +13:00
authorities Bug 10862: Add search history to the intranet interface 2014-05-05 03:06:33 +00:00
basket Bug 13343: Embed items when send a basket/shelf 2015-02-26 18:05:16 +13:00
catalogue Bug 10857: (follow-up) make it possible to remove facets that contain diacritics 2014-05-05 21:44:03 +00:00
cataloguing Bug 13268: the size should not be emptied in pl script 2015-04-22 22:25:30 +12:00
circ Bug 12122: TransferSlip should accept both itemnumber and barcode 2015-04-23 00:32:50 +12:00
course_reserves Bug 11866: (follow-up) repair security issue introduced by main patch 2014-03-10 14:57:17 +00:00
debian Bug 14068: fix preinst for fresh package installs 2015-05-31 12:41:22 +12:00
docs Bug 7143: Updating new developers 2014-07-23 20:43:21 +00:00
errors
…
etc Bug 9612: (follow-up) restore elementSetName in Context.pm 2014-05-19 16:46:57 +00:00
install_misc Bug 11757: remove dependency on POE 2014-02-15 01:38:15 +00:00
installer Bumping DB version for 3.16.11 2015-05-31 13:28:52 +12:00
koha-tmpl Bug 14423 XSS bug in auth_subfields_structure 2015-06-23 15:30:08 +12:00
labels Bug 8375: Use TrueType fonts in PDF::Reuse 2014-05-05 21:53:18 +00:00
members Bug 13602 - Username/password already exists when editing borrower attributes and messaging preferences 2015-02-26 16:41:54 +13:00
misc Add release notes for 3.16.11 2015-05-31 13:28:46 +12:00
offline_circ Bug 10240: (follow-up) don't display patrons as lost or gone-no-address incorrectly 2013-10-11 01:57:05 +00:00
opac Bug 14412 : SQL injection possible 2015-06-23 15:30:07 +12:00
patron_lists Bug 10565: (follow-up) add new user permission for patron list management 2013-10-14 22:43:03 +00:00
patroncards Bug 10636 - patronimage should have borrowernumber as PK, not cardnumber 2013-10-14 21:08:02 +00:00
plugins Bug 7804 - Add Koha Plugin System - QA Followup 2 2013-03-20 14:50:19 -04:00
reports Bug 13578: Make sure the 'public' parameter is passed to the last step 2015-03-27 15:19:04 +13:00
reserve Bug 11801: In transit hold items incorrectly labels as "Waiting to be pulled" on request.pl 2014-06-18 21:11:53 +00:00
reviews
…
rotating_collections Bug 9605: rotating collections permissions are wrong 2013-03-30 22:11:05 -04:00
selenium
…
serials Bug 11226: subscription frequencies and numbering patterns should be editable with serials permissions 2014-07-23 21:26:10 +00:00
services Bug 11715: require authentication for various staff scripts 2014-06-25 22:43:20 +00:00
skel Bug 11078: Add locking to rebuild_zebra 2014-02-28 22:21:41 +00:00
sms Bug 10611: Use mysql_auto_reconnect instead of ping 2014-03-10 23:15:35 +00:00
suggestion Bug 10519: (followup) Fix context for evalyating $borrowernumber 2014-09-23 20:27:26 +00:00
svc Bug 13801: svc/bib - Set charset to utf-8 on printing header 2015-03-26 13:15:30 +13:00
t Bug 14408: Add tests to get_template_and_user 2015-06-23 15:30:07 +12:00
tags Bug 10730: Use DataTables on the tag review page 2013-09-25 16:47:59 +00:00
test 3.16.x test push 2014-12-22 16:21:38 +13:00
tmp/modified_authorities
…
tools Bug 11331 - CSV export for viewlog.pl is missing newlines - followup 2015-04-23 01:18:16 +12:00
virtualshelves Bug 13343: Embed items when send a basket/shelf 2015-02-26 18:05:16 +13:00
xt Bug 12271: (follow-up) teach valid-templates.t how to include specified templates 2014-05-19 16:14:28 +00:00
.htaccess
…
.mailmap
…
INSTALL
…
INSTALL.debian
…
INSTALL.fedora7 Bug 11757: remove dependency on POE 2014-02-15 01:38:15 +00:00
INSTALL.opensuse Bug 11757: remove dependency on POE 2014-02-15 01:38:15 +00:00
INSTALL.ubuntu Bug 7764: (follow-up) editorial tweaks 2013-10-04 16:27:55 +00:00
LICENSE Bug 9440 - update Koha's LICENSE file from GPL2 to GPL3 2013-02-12 08:52:10 -05:00
MANIFEST.SKIP
…
Makefile.PL Bug 13586: Remove some other occurrences 2015-03-27 16:49:14 +13:00
README Bug 9440 - update Koha's LICENSE file from GPL2 to GPL3 2013-02-12 08:52:10 -05:00
README.robots
…
about.pl Bug 14006: about.pl checks the wrong zebra index mode 2015-05-29 20:21:23 +12:00
changelanguage.pl
…
edithelp.pl Bug 11661: sanitize file names supplied to edithelp.pl 2014-02-05 01:36:10 +00:00
fix-perl-path.PL
…
help.pl Bug 11238: contruct links to the appropriate manual version dynamically 2013-11-23 19:30:16 +00:00
install-CPAN.pl
…
koha_perl_deps.pl bug 10548: fix count of missing required dependencies by koha_perl_deps.pl 2013-07-11 14:03:32 +00:00
kohaversion.pl Bumping DB version for 3.16.11 2015-05-31 13:28:52 +12:00
mainpage.pl Bug 7567 - Use, display, filter News by library 2014-04-07 18:14:19 +00:00
rewrite-config.PL Bug 10729: Add phrases configuration for ICU 2014-05-05 04:10:57 +00:00

README 

Koha is a free software integrated library system.

Koha is distributed under the GNU GPL version 3 or later.
Please read the file LICENSE for more details.

To install or upgrade Koha, please see the INSTALL file appropriate
to your platform.

Report bugs at http://bugs.koha-community.org/

Visit the Koha Project website at http://www.koha-community.org/