CVE-2015-4631 Multiple cross-site scripting (XSS) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to inject arbitrary web...
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to inject arbitrary web script or HTML via the (1) tag parameter to opac-search.pl; the (2) value parameter to authorities/authorities-home.pl; the (3) delay parameter to acqui/lateorders.pl; the (4) authtypecode or (5) tagfield to admin/auth_subfields_structure.pl; the (6) tagfield parameter to admin/marc_subfields_structure.pl; the (7) limit parameter to catalogue/search.pl; the (8) bookseller_filter, (9) callnumber_filter, (10) EAN_filter, (11) ISSN_filter, (12) publisher_filter, or (13) title_filter parameter to serials/serials-search.pl; or the (14) author, (15) collectiontitle, (16) copyrightdate, (17) isbn, (18) manageddate_from, (19) manageddate_to, (20) publishercode, (21) suggesteddate_from, or (22) suggesteddate_to parameter to suggestion/suggestion.pl; or the (23) direction, (24) display or (25) addshelf parameter to opac-shelves.pl.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| koha | >= 3.14.00, < 3.14.16 | 3.14.16 |
| koha | >= 3.16.00, < 3.16.12 | 3.16.12 |
| koha | >= 3.18.0, < 3.18.8 | 3.18.8 |
| koha | >= 3.20.00, < 3.20.1 | 3.20.1 |
References
- bugs.koha-community.org exploit issue-tracking vendor-advisory
- bugs.koha-community.org exploit issue-tracking vendor-advisory
- bugs.koha-community.org exploit issue-tracking
- koha-community.org product release-notes vendor-advisory
- koha-community.org product release-notes vendor-advisory
- koha-community.org product release-notes vendor-advisory
- koha-community.org product release-notes vendor-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20150625 SBA Research Vulnerability Disclosure - Multiple Critical Vulnerabilities in Koha ILS exploit mailing-list third-party-advisory
- 37389 exploit third-party-advisory vdb-entry
- www.sba-research.org third-party-advisory