We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
In web/ajax/modal.php, an arbitrary php file path can be passed in the request and loaded:
web/ajax/modal.php
$modal = validJsStr($_REQUEST['modal']); @$result = include('modals/'.$modal.'.php');
Fixed by 6e417c2 Upgrade to 1.36.33 or 1.37.33.
Apply patch manually
Manfred Paul
Impact
In
web/ajax/modal.php, an arbitrary php file path can be passed in the request and loaded:$modal = validJsStr($_REQUEST['modal']);
@$result = include('modals/'.$modal.'.php');
Patches
Fixed by 6e417c2
Upgrade to 1.36.33 or 1.37.33.
Workarounds
Apply patch manually
Credits
Manfred Paul