[Owncloud] [URGENT] "movable apps" exploitation

Mon May 7 11:25:04 UTC 2012

It's fixed (https://gitorious.org/owncloud/owncloud/commit/d032345191c57294d5723639f777692c85bd2b1a)
It seems like there has been ******* merge conflicts which caused this fail. (I actually fixed this earlier)
It should now return a 404.

Cheers,
Georg

Am 07.05.2012 um 13:12 schrieb Florian Hülsmann:

> /owncloud/?app=files&getfile=/../../data/bestfriend/files/hack.php
> 
> I don't think I have to be more specific.
> 
> Florian
> 
> -- 
> Florian Hülsmann
> <fh at cbix.de>
> http://cbix.de
> _______________________________________________
> Owncloud mailing list
> Owncloud at kde.org
> https://mail.kde.org/mailman/listinfo/owncloud