RSS   Podatności dla 'Program generation language'   RSS

2006-12-18
 
CVE-2006-6629

 

 
lib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation (PG) Language before 2.3.1 uses an insufficiently restrictive regular expression to determine valid macro filenames, which allows attackers to load arbitrary macro files whose names contain the strings (1) dangerousMacros.pl, (2) PG.pl, or (3) IO.pl.

 

 >>> Vendor: Webwork 2 Produkty
Webwork
Program generation language


Copyright 2024, cxsecurity.com

 

Back to Top