fernando/luos
1
0
Fork 0
Code Releases Activity

HOR-877: Very High: OS Command Injection Package.php

Browse Source
This commit is contained in:
mcuiza
2016-04-27 16:02:03 -04:00
parent 4cc8a1e92a
commit c62f625076
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
gulliver/thirdparty/pear/PEAR/Command/Package.php vendored
View File

@@ -444,6 +444,20 @@ Wrote: /usr/src/redhat/RPMS/i386/PEAR::Net_Socket-1.0-1.i386.rpm
function doPackageDependencies($command, $options, $params)
{
if (!class_exists('G')) {
$realdocuroot = str_replace( '\\', '/', $_SERVER['DOCUMENT_ROOT'] );
$docuroot = explode( '/', $realdocuroot );
array_pop( $docuroot );
$pathhome = implode( '/', $docuroot ) . '/';
array_pop( $docuroot );
$pathTrunk = implode( '/', $docuroot ) . '/';
require_once($pathTrunk.'gulliver/system/class.g.php');
}
G::LoadSystem('inputfilter');
$filter = new InputFilter();
$command = $filter->validateInput($command);
// $params[0] -> the PEAR package to list its information
if (sizeof($params) != 1) {
return $this->raiseError("bad parameter(s), try \"help $command\"");