New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SQL calls still not patched against ejection #335

Closed

LordRalex opened this issue Dec 8, 2014 · 0 comments

Milestone

Member

LordRalex commented Dec 8, 2014

Found at least one place where no filtering is done on input with SQL calls

https://github.com/PufferPanel/PufferPanel/blob/master/panel/admin/config/actions/url.php#L38

LordRalex added the security hole label

LordRalex added this to the 0.7.6 Beta milestone

LordRalex closed this as completed in

25adbbc

LordRalex added a commit that referenced this issue


          Fix raw SQL usage on URL saving

fed5da0

Resolves #335

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment