w0c4tool comments

Repositories
Issues
Comments

Results 1 comments of


                                            w0c4tool

Remote command execution vulnerability in 3.3.16

`if((isset($_POST['submitsave']))){ # check for csrf if (!defined('GSNOCSRF') || (GSNOCSRF == FALSE) ) { $nonce = $_POST['nonce']; if(!check_nonce($nonce, "save")) { die("CSRF detected!"); } } # save edited template file $SavedFile =...