#47 User can download any file on server by specifying full path of a file

Closed
opened 3 years ago by farooqkz · 0 comments

You can use this bug in this way:

http://your_server/download?name=/full/path/to/any/file
You can use this bug in this way: ``` http://your_server/download?name=/full/path/to/any/file ```
Farooq Karimi Zadeh referenced this issue from a commit 3 years ago
Sign in to join this conversation.
Loading...
Cancel
Save
There is no content yet.