Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
bugzilla
Project
Project
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
etersoft
bugzilla
Commits
6df993a2
Commit
6df993a2
authored
Oct 08, 2003
by
jocuri%softhome.net
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Bug 213384: shutdownhtml login bypass via editparams.cgi is broken under suexec. r=kiko, a=justdave
parent
7976d7b5
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
1 addition
and
1 deletion
+1
-1
CGI.pl
CGI.pl
+1
-1
No files found.
CGI.pl
View file @
6df993a2
...
...
@@ -55,7 +55,7 @@ use vars qw($template $vars);
# to the user about the downtime. (do)editparams.cgi is exempted from
# this message, of course, since it needs to be available in order for
# the administrator to open Bugzilla back up.
if
(
Param
(
"shutdownhtml"
)
&&
$0
!~
m:
[
\\/
](
do
)?
editparams
.
cgi$:
)
{
if
(
Param
(
"shutdownhtml"
)
&&
$0
!~
m:
(
^|
[
\\/
])(
do
)?
editparams
\
.
cgi$:
)
{
$::vars
->
{
'message'
}
=
"shutdown"
;
# Return the appropriate HTTP response headers.
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment