Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

request #9204: Fix SQL injections in CVS

Download Browse

Also, a potential remote command execution is fixed Change-Id: Ifb3fc46671029058d604e63e4aa66082c349835e

+68 −51
Thomas Gerbet (tgerbet) 2016-05-30 11:11
Thomas Gerbet (tgerbet) 2016-05-30 14:49
d34e09a753ac6ab51f4d45ecadf237c1d97e67e4
c790193baaf6d98b1e2a1ed4d442b614e634fb7b
git #tuleap/stable/d34e09a753ac6ab51f4d45ecadf237c1d97e67e4

Modified Files

Side by side diff
Inline diff
Name
M src/www/cvs/admin_commit.php +2 −1 Go to diff View file
M src/www/cvs/commit_utils.php +35 −31 Go to diff View file
M src/www/cvs/cvs_intro.php +3 −3 Go to diff View file
M src/www/cvs/detail_commit.php +10 −7 Go to diff View file
M src/www/cvs/index.php +14 −7 Go to diff View file
M src/www/cvs/viewvc.php +4 −2 Go to diff View file