#717: Generating the current route with additional or changed arguments allows
code injections
----------------------+-----------------------------------------------------
 Reporter:  david     |        Owner:  david    
     Type:  defect    |       Status:  closed   
 Priority:  highest   |    Milestone:  0.11.1   
Component:  routing   |      Version:  0.11.1RC1
 Severity:  critical  |   Resolution:  fixed    
 Keywords:            |    Has_patch:  0        
----------------------+-----------------------------------------------------
Comment (by david):

 (In [2393]) Info bout security vulnerabilities that existed in 0.11.1-dev,
 refs #717 and #718

-- 
Ticket URL: <http://trac.agavi.org/ticket/717#comment:3>
Agavi <http://www.agavi.org/>
An MVC Framework for PHP5


_______________________________________________
Agavi Tickets Mailing List
[email protected]
http://lists.agavi.org/mailman/listinfo/tickets

Reply via email to