Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

request #10159: Remote code execution through the SyntaxHighlighter plugin of PHPWiki

Download Browse

Change-Id: Iaa3ffaeb00098e38b32a61799416f74d03286788

+33 −109
Thomas Gerbet (tgerbet) 2017-04-20 16:35
Thomas Gerbet (tgerbet) 2017-04-20 17:54
5e412c2e728447d651b84160454b2e1443963c4e
c5aa68b95938dfe200525ec7b2ce3cf374eab283
git #tuleap/stable/5e412c2e728447d651b84160454b2e1443963c4e

Modified Files

Side by side diff
Inline diff
Name
M src/common/wiki/phpwiki/lib/plugin/SyntaxHighlighter.php +23 −50 Go to diff View file
M src/common/wiki/phpwiki/pgsrc/SyntaxHighlighterPlugin +2 −4 Go to diff View file
D src/common/wiki/phpwiki/themes/default/highlight-emacs.css +0 −21 Go to diff View file
D src/common/wiki/phpwiki/uploads/highlight-emacs.css +0 −30 Go to diff View file
M tools/rpm/tuleap.rhel6.spec +5 −3 Go to diff View file
M tools/rpm/tuleap.rhel7.spec +3 −1 Go to diff View file