From ba92bbf96515353fdc096ff08655bf9fb850af7e Mon Sep 17 00:00:00 2001 From: joebordes Date: Sun, 7 Nov 2021 16:10:51 +0100 Subject: [PATCH] sec(Index) Code Injection on action parameter: https://huntr.dev/bounties/1776bdef-3dc5-4fdf-bb57-b61579bc0c9b/ --- index.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.php b/index.php index 37c58e1ae3..0a333b4e8f 100644 --- a/index.php +++ b/index.php @@ -101,7 +101,7 @@ $is_action = false; } if (!$is_action) { - die('Action name is missing or incorrect. Please check the action name: '.vtlib_purify($action)); + die('Action name is missing or incorrect. Please check the action name'); } }