]> git.p6c8.net - jirafeau_mojo42.git/commitdiff
git.p6c8.net / jirafeau_mojo42.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw (from parent 2: c019221)
Merge branch 'master' into 'master'
authorJérôme <mojo@couak.net>
Tue, 22 Mar 2016 09:10:42 +0000 (09:10 +0000)
committerJérôme <mojo@couak.net>
Tue, 22 Mar 2016 09:10:42 +0000 (09:10 +0000)
admin.php: fix authentication bypass vulnerability

An attacker ban bypass the authentication form by passing an array instead of a string (https://www.owasp.org/index.php/PHP_Security_Cheat_Sheet#Input_handling). The identity operator should fix the vulnerability.

See merge request !13


No differences found
Mirror of mojo42's Git repository for the Jirafeau project; main repository at https://gitlab.com/mojo42/Jirafeau

patrick-canterino.de