openmamba/wordpress-theme-openmamba
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

cgi-bin/text-to-html-filter.cgi: security check on path prefix

Browse Source
This commit is contained in:
Silvan Calarco 2021-08-02 09:55:39 +02:00
parent ba336825f1
commit 9a8139f571
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cgi-bin/text-to-html-filter.cgi
View File

@ -4,7 +4,7 @@ ext=${file/*.}
range=10000 range=10000
filename="/var/www/www.openmamba.org/$file" filename="/var/www/www.openmamba.org/$file"
filename_check=`readlink -f $filename` filename_check=`readlink -f $filename`
[ "${filename_check:0:27}" = "/mnt/sdc1/ftp/pub/openmamba" ] || exit 0 [ "${filename_check:0:22}" = "/var/ftp/pub/openmamba" ] || exit 0
if [ "$page" ]; then if [ "$page" ]; then
[ $page -gt 0 ] || page=1 [ $page -gt 0 ] || page=1
else else