Ilia Ross 09da9e6104 Fix unvalidated password file path in Nginx module ...

ⓘ The password file path was taken from the request without any check, so it could point at any file on the system, which was then read or written.

It is now checked against the allowed directories, the same way it already is when the path is first set.

W1 and V4

2026-08-20 14:24:03 +02:00

..

help

Update a new Nginx module to look and feel like Apache

2026-04-26 00:05:16 +02:00

images

…

lang

Actually check ACL for restarting Nginx

2026-08-03 10:36:58 -07:00

t

Fix to respect Virtualmin state for server files

2026-05-19 22:11:21 +02:00

acl_security.pl

Add raw config edit ACL and server shortcut

2026-05-19 01:16:19 +02:00

backup_config.pl

…

config

…

config-AlmaLinux-7.0-ALL

…

config-CentOS-Linux-7.0-ALL

…

config-CentOS-Stream-Linux-8.0-ALL

…

config-debian-linux

…

config-openSUSE-Linux-15.0-ALL

…

config-Oracle-Linux-8.0-ALL

…

config-Redhat-Enterprise-Linux-7.0-ALL

…

config-redhat-linux

…

config-Rocky-Linux-7.0-ALL

…

config-Scientific-Linux-7.0-ALL

…

config-Ubuntu-Linux-16.04-ALL

…

config.info

Add default extra directives for Nginx server blocks

2026-04-26 20:19:45 +02:00

config.info.nl

Add default extra directives for Nginx server blocks

2026-04-26 20:19:45 +02:00

defaultacl

Update a new Nginx module to look and feel like Apache

2026-04-26 00:05:16 +02:00

delete_servers.cgi

Fix to respect Virtualmin state for server files

2026-05-19 22:11:21 +02:00

edit_docs.cgi

…

edit_fcgi.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_laccess.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_ldocs.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_lfcgi.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_lgzip.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_location.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_logs.cgi

…

edit_lproxy.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_lrewrite.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_lssi.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_manual.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_mime.cgi

Fix permissions on CGIs

2026-05-03 17:57:24 -07:00

edit_misc.cgi

…

edit_net.cgi

…

edit_saccess.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_sdocs.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_server.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_sgzip.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_slogs.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_sproxy.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_srewrite.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_ssi.cgi

…

edit_ssl.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_sssi.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

edit_user.cgi

Fix unvalidated password file path in Nginx module

2026-08-20 14:24:03 +02:00

fetch-directives.pl

…

index.cgi

Fix to respect Virtualmin state for server files

2026-05-19 22:11:21 +02:00

list_users.cgi

Fix unvalidated password file path in Nginx module

2026-08-20 14:24:03 +02:00

log_parser.pl

Add site state toggles and proxy-aware server list

2026-05-18 22:08:36 +02:00

module.info

Add extra flag to module info

2026-04-26 21:38:05 +02:00

module.info.ar.auto

…

module.info.bg.auto

…

module.info.ca.auto

…

module.info.cs.auto

…

module.info.da.auto

…

module.info.de.auto

…

module.info.el.auto

…

module.info.es.auto

…

module.info.eu.auto

…

module.info.fa.auto

…

module.info.fi.auto

…

module.info.fr.auto

…

module.info.hr.auto

…

module.info.hu.auto

…

module.info.it.auto

…

module.info.ja.auto

…

module.info.ko.auto

…

module.info.ms.auto

…

module.info.nl

…

module.info.no.auto

…

module.info.pl.auto

…

module.info.pt_BR.auto

…

module.info.pt.auto

…

module.info.ru.auto

…

module.info.sk.auto

…

module.info.sv.auto

…

module.info.tr.auto

…

module.info.uk.auto

…

module.info.zh_TW.auto

…

module.info.zh.auto

…

nginx-directives

…

nginx-lib.pl

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

restart.cgi

Actually check ACL for restarting Nginx

2026-08-03 10:36:58 -07:00

save_docs.cgi

Fix permissions on CGIs

2026-05-03 17:57:24 -07:00

save_fcgi.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_laccess.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_ldocs.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_lfcgi.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_lgzip.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_location.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_logs.cgi

Fix permissions on CGIs

2026-05-03 17:57:24 -07:00

save_lproxy.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_lrewrite.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_lssi.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_manual.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_mime.cgi

Fix permissions on CGIs

2026-05-03 17:57:24 -07:00

save_misc.cgi

Fix permissions on CGIs

2026-05-03 17:57:24 -07:00

save_net.cgi

Fix permissions on CGIs

2026-05-03 17:57:24 -07:00

save_saccess.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_sdocs.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_server.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_sgzip.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_slogs.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_sproxy.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_srewrite.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_ssi.cgi

Fix permissions on CGIs

2026-05-03 17:57:24 -07:00

save_ssl.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_sssi.cgi

Fix to preserve submodule context in Virtualmin flows

2026-05-30 02:29:04 +02:00

save_user.cgi

Fix unvalidated password file path in Nginx module

2026-08-20 14:24:03 +02:00

start.cgi

Fix permissions on CGIs

2026-05-03 17:57:24 -07:00

status_monitor.pl

…

stop.cgi

Fix permissions on CGIs

2026-05-03 17:57:24 -07:00