Security hole in multipart.cgi.in, w3mman2html.cgi.in
From: Hironori Sakamoto <h-saka@lsi.nec.co.jp>
This commit is contained in:
@@ -31,7 +31,7 @@ Content-Type: text/html
|
||||
<h2>man -k <b>$k</b></h2>
|
||||
<ul>
|
||||
EOF
|
||||
$keyword =~ s:([^\w./]):\\$1:g;
|
||||
$keyword =~ s:([^-\w\200-\377.,])::g;
|
||||
open(F, "$MAN -k $keyword 2> /dev/null |");
|
||||
@line = ();
|
||||
while(<F>) {
|
||||
@@ -82,8 +82,8 @@ if ($man =~ s/\((\w+)\)$//) {
|
||||
$man_section = "$man";
|
||||
}
|
||||
|
||||
$section =~ s:([^\w./]):\\$1:g;
|
||||
$man =~ s:([^\w./]):\\$1:g;
|
||||
$section =~ s:([^-\w\200-\377.,])::g;
|
||||
$man =~ s:([^-\w\200-\377.,])::g;
|
||||
open(F, "$MAN $section $man 2> /dev/null |");
|
||||
$ok = 0;
|
||||
undef $header;
|
||||
|
||||
Reference in New Issue
Block a user