michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-10-20 11:10:40 +01:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity
Files
222a2fd31be1011144faf523abbfbfbe68a88891
webmin/custom
History
Ilia Ross 8742ccd312
Some checks failed
Tests / prove (push) Has been cancelled
Details
Package and upload artifacts / build (push) Has been cancelled
Details
Close inactive / close-inactive (push) Has been cancelled
Details
Fix Custom Commands editor path injection 
This fixes path traversal and command injection in Custom Commands file editors.

It replaces shell-based path expansion with confined Perl expansion and validates non-path parameters.

It also applies ownership and permissions without invoking a shell.
2026-10-02 04:58:53 +02:00
..
help
Revert "Dev: Testing build script issues for separate modules"
2025-09-17 04:30:23 +03:00
images
Remove small icons that are never used
2018-11-25 17:16:12 -08:00
lang
Disallow multiple null-separate parameter values
2026-09-14 19:40:24 -07:00
acl_security.pl
Use new UI library for acl editing
2017-11-27 08:47:15 -08:00
backup_config.pl
Allow backups of custom commands http://virtualmin.com/node/33021
2014-04-24 21:23:17 -07:00
cgi_args.pl
Fix permissions
2009-07-20 23:42:32 -07:00
CHANGELOG
Add new parameter type which is actually a submit button
2011-11-30 21:42:43 -08:00
config
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config-ALL-linux
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.ca
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.cs
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.de
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.es
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.fr
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.hr
Restore incorrectly transcoded configs
2020-04-09 18:52:05 +03:00
config.info.it
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.ko
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.ms
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.nl
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.no
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.pl
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.ru
Language Transform: All modules transcode (config) to new UTF-8 format
2020-02-28 16:08:10 +03:00
config.info.sk
Restore incorrectly transcoded configs
2020-04-09 18:52:05 +03:00
config.info.tr
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.uk
Language Transform: All modules transcode (config) to new UTF-8 format
2020-02-28 16:08:10 +03:00
custom-lib.pl
Fix Custom Commands editor path injection
2026-10-02 04:58:53 +02:00
defaultacl
…
edit_cmd.cgi
Support possible media streaming in progressive output https://github.com/webmin/webmin/issues/1250 75517a865d
2020-06-25 13:30:19 +03:00
edit_file.cgi
Show better label for second description field
2011-09-11 21:57:31 -07:00
edit_sql.cgi
Show better label for second description field
2011-09-11 21:57:31 -07:00
feedback_files.pl
Fix permissions
2009-07-20 23:42:32 -07:00
form.cgi
Fix forms column for Custom Commands module
2021-11-09 15:39:50 +03:00
index.cgi
Fix to always print table row even if empty #1809
2022-12-16 17:29:02 +02:00
log_parser.pl
Fix permissions
2009-07-20 23:42:32 -07:00
module.info
Remove obsolete code for module risk levels
2019-12-05 13:12:52 -08:00
module.info.ar
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ar.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.bg
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.bg.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ca
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.ca.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.cs
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.cs.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.da
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.da.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.de
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.de.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.el
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.el.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.es
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.es.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.eu
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.eu.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.fa
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.fa.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.fi
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.fi.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.fr
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.fr.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.hr
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.hr.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.hu
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.hu.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.it
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.it.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ja
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ja.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ko
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ko.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ms
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ms.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.nl
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.nl.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.no
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.no.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.pl
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.pl.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.pt
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.pt_BR
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.pt_BR.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.pt.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ru
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ru.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.sk
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.sk.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.sv
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.sv.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.tr
Complete the Turkish module.info descriptions
2026-08-30 14:41:10 +03:00
module.info.tr.auto
Complete the Turkish module.info descriptions
2026-08-30 14:41:10 +03:00
module.info.uk
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.uk.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.zh
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.zh_TW
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.zh_TW.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.zh.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
prefs.info
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
run.cgi
Support possible media streaming in progressive output https://github.com/webmin/webmin/issues/1250 75517a865d
2020-06-25 13:30:19 +03:00
safeacl
Safe mode in the custom commands module just allows execution of commands
2026-06-28 17:17:21 -07:00
save_cmd.cgi
Support possible media streaming in progressive output https://github.com/webmin/webmin/issues/1250 75517a865d
2020-06-25 13:30:19 +03:00
save_file.cgi
Command to run before editing a file
2011-08-12 22:03:30 -07:00
save_sql.cgi
Allow ordering of SQL commands
2011-08-20 16:53:46 -07:00
save.cgi
Fix Custom Commands editor path injection
2026-10-02 04:58:53 +02:00
sql.cgi
…
sqlform.cgi
Fix forms column for Custom Commands module
2021-11-09 15:39:50 +03:00
view.cgi
Fix Custom Commands editor path injection
2026-10-02 04:58:53 +02:00