KitzKikz  KitzKikz: SogudiIssues_20060101   RecentChanges 
 PopularPages 
 SearchPages 
 Home | Trail - BookListShannara > SogudiIssues_2006...
 
Learn Spanish Learn Spanish Today Learn Spanish - Learn Spanish on-line for free, using interactive audio/visual lessons.
 

TITLE: Serious security bug. PROBLEM:

Shell command called w/o input verification. This shouldnot happen ... please read a book about basic programming stuff.

man:huhu;touch

<a href="man:huhu;touch>do anything i want</a>

RESPONSE:

SOLUTION:

make a regex s/A-Za-z0-9_-?//g on the input.

regards, Tom Bille

STATUS: OPEN

 

 
Free Spanish Lessons
 

 
 EditThisPage · LinksToPage · PageInfo 01/01/06 09:40:17  ·  0.0762s