/[smecontribs]/rpms/smeserver-phpwebftp/contribs8/smeserver-phpwebftp-4.0.bz7175.pointusername.patch
ViewVC logotype

Annotation of /rpms/smeserver-phpwebftp/contribs8/smeserver-phpwebftp-4.0.bz7175.pointusername.patch

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.1 - (hide annotations) (download)
Wed Aug 3 08:12:48 2016 UTC (7 years, 9 months ago) by unnilennium
Branch: MAIN
CVS Tags: smeserver-phpwebftp-4_0-10_el5_sme, HEAD
* Wed Aug 03 2016 Jean-Philipe Pialasse <tests@pialasse.com> 4.0-10.sme
- fix  XSS security issue in phpwebftp [SME: 9528]
- https://sourceforge.net/p/phpwebftp/bugs/17/
- add utf8 in meta to fix bad display in French

1 unnilennium 1.1 diff -Nur smeserver-phpwebftp-4.0.old/root/home/httpd/html/webftp/include/ftp.class.php smeserver-phpwebftp-4.0/root/home/httpd/html/webftp/include/ftp.class.php
2     --- smeserver-phpwebftp-4.0.old/root/home/httpd/html/webftp/include/ftp.class.php 2016-08-03 01:49:20.123000000 -0400
3     +++ smeserver-phpwebftp-4.0/root/home/httpd/html/webftp/include/ftp.class.php 2016-08-03 02:04:29.022000000 -0400
4     @@ -301,9 +301,9 @@
5     $regexp .= "\s+"; // one or more spaces
6     $regexp .= "(\d+)"; // numbers (?), $regs[2]
7     $regexp .= "\s+"; // one or more spaces
8     - $regexp .= "([\d\w\-_]+)"; // user, $regs[3]
9     + $regexp .= "([\d\w\-_.]+)"; // user, $regs[3]
10     $regexp .= "\s+"; // one or more spaces
11     - $regexp .= "([\d\w\-_]+)"; // group, $regs[4]
12     + $regexp .= "([\d\w\-_.]+)"; // group, $regs[4]
13     $regexp .= "\s+"; // one or more spaces
14     $regexp .= "(\d+)"; // size, $regs[5]
15     $regexp .= "\s+"; // one or more spaces

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed