servnest
/
servnest
1
1
Fork 0
Code Issues 4 Pull Requests Releases Wiki Activity

dev #8

Merged
miraty merged 9 commits from dev into main 2023-06-19 03:51:58 +02:00
Conversation 0 Commits 9 Files Changed 41 +645 -241
miraty commented 2023-06-19 03:51:44 +02:00
Owner
Copy Link
No description provided.
miraty added 9 commits 2023-06-19 03:51:44 +02:00
7f7bcadb58 Fix important vulnerability in reg/ds.php + exescape 
In page reg/ds.php, POST parameter 'key' was directly sent to shell, allowing for remote arbitrary commands execution.

This commit fixes this vulnerability, and uses a new function to automatically escape every shell command arguments as an additional generic protection.
miraty merged commit f5aee06ff5 into main 2023-06-19 03:51:58 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
Accessibility

Provide optimal access for every use case

  
Anti-spam

Prevent abuse of the service

  
auth

   
Bug

   
CSS

Page graphical display

  
Feature request

   
ht

Hypertext service

  
HTML

Page structure

  
ns

Nameserver service

  
reg

Domain registry service

  
Security

Protect integrity, confidentiality and disponibility of the service and users data

No Label
Accessibility
Anti-spam
auth
Bug
CSS
Feature request
ht
HTML
ns
reg
Security
Milestone
Clear milestone
No items
No Milestone
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: servnest/servnest#8
No description provided.
Delete Branch "dev"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?