|
Viewing Issue Simple Details
[ Jump to Notes ]
|
[ << ] [ >> ] |
[ View Advanced ]
[ Issue History ]
[ Print ]
|
|
ID |
Category |
Severity |
Reproducibility |
Date Submitted |
Last Update |
|
0001288 |
[SysCP] General |
major |
always |
2010-03-08 13:30 |
2010-05-11 20:52 |
|
|
Reporter |
massimo |
View Status |
public |
|
|
Assigned To |
|
|
Priority |
normal |
Resolution |
fixed |
|
|
Status |
resolved |
|
Product Version |
1.4.2.1 |
|
|
Summary |
0001288: safe_exec filter doesn't work |
|
Description |
The safe_exec function doesn't block commands which are not in the whitelist.
E.g. 'ln' is not in the $allowed_commands array, but the following works:
safe_exec("ln -s aaa bbb");
|
|
Additional Information |
|
| Tags |
No tags attached. |
|
|
Attached Files |
 patch [^] (596 bytes) 2010-03-08 13:30 |
|
|
Relationships 
