[Tickets #11788] Re: Shell injection bug in smbclient back end

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://bugs.horde.org/ticket/11788
------------------------------------------------------------------------------
  Ticket             | 11788
  Updated By         | dfg at dsf.com
  Summary            | Shell injection bug in smbclient back end
  Queue              | Gollem
  Version            | 1.1
  Type               | Bug
  State              | Assigned
  Priority           | 3. High
  Milestone          |
  Patch              | 1
  Owners             | Jan Schneider
+New Attachment     | poc.svg
------------------------------------------------------------------------------


dfg at dsf.com (2019-03-14 16:11) wrote:

dsgdfg"><img/src/onerror=alert(2)>sdgdfg



dfg at dsf.com (2019-03-14 16:11) uploaded: poc.svg

https://bugs.horde.org/h/services/download/?app=whups&actionID=download_file&file=poc.svg&ticket=11788&fn=%2Fpoc.svg