Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

request #10504: Remote code execution through preg_replace() calls

Download Browse

Previous contributions 9c06c390b0ab3fb019437a50269fa810c3004188 and bd3e7103495f3494a969b46a06976af08bcbace9 has left vulnerable calls behind. Change-Id: I24a2e86c8f3a036ab77f4ca6b04a9b19b82ac9e4

+41 −28
Thomas Gerbet (tgerbet) 2017-08-03 17:52
Thomas Gerbet (tgerbet) 2017-08-04 13:56
e81d92a3418cd5ec4061e7a4f39348d03db411d8
c12c6b33cc17608e2650a8e9a6479b31ec5b2291
git #tuleap/stable/e81d92a3418cd5ec4061e7a4f39348d03db411d8

Modified Files

Side by side diff
Inline diff
Name
M plugins/git/include/Git/Gitolite/GitoliteConfWriter.php +2 −2 Go to diff View file
M plugins/mediawiki/include/mediawikiPlugin.class.php +1 −1 Go to diff View file
M src/common/wiki/phpwiki/lib/Template.php +12 −18 Go to diff View file
M src/common/wiki/phpwiki/lib/WikiDB/backend/PearDB.php +10 −1 Go to diff View file
M src/common/wiki/phpwiki/lib/WikiPlugin.php +7 −4 Go to diff View file
M src/common/wiki/phpwiki/lib/XmlRpcServer.php +9 −2 Go to diff View file