SetupTool has SQL injection vulnerabilities

ebsco / openathens-koha-plugin

Offer single-sign on to your users by integrating Koha and OpenAthens. The OpenAthens plugin for Koha creates an OpenAthens user session for anyone that logs into Koha. This allows users to now access publisher resources using their Koha login credentials.

3 stars 7 forks source link

SetupTool has SQL injection vulnerabilities #6

Closed minusdavid closed 5 years ago

minusdavid commented 5 years ago

While the user input is coming from the staff client rather than the OPAC, this has some potentially very dangerous consequences.

minusdavid commented 5 years ago

See pull request at https://github.com/ebsco/openathens-koha-plugin/pull/9

minusdavid commented 5 years ago

This has been resolved