Michael Tremer 7f6257e0a4 backup: Sanitise FILE parameter ...

This parameter was passed to some shell commands without any
sanitisation which allowed an attacker who was authenticated to
the web UI to download arbitrary files from some directories
and delete any file from the filesystem.

References: #11830

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

2018-09-13 15:03:59 +01:00

..

cgi-bin

backup: Sanitise FILE parameter

2018-09-13 15:03:59 +01:00

html

embed background image in redirect template

2018-09-10 16:30:09 +01:00