Skip to content

Instantly share code, notes, and snippets.

@Wocanilo
Wocanilo / adAS.patch
Created September 17, 2019 13:41
Parche para adAS 1.7.0 que soluciona múltiples vulnerabilidades
diff -Naur adas-1.7.0/adas-admin/lib/command/logs/LogHelper.class.php adas-1.7.1/adas-admin/lib/command/logs/LogHelper.class.php
--- adas-1.7.0/adas-admin/lib/command/logs/LogHelper.class.php 2017-04-04 19:01:47.000000000 +0200
+++ adas-1.7.1/adas-admin/lib/command/logs/LogHelper.class.php 2019-09-15 17:24:17.145398700 +0200
@@ -171,7 +171,7 @@
$logs[$id_thread]["logs"][] = array(
'hour' => $data["timestamp"],
'mode' => $data["level"],
- 'msg' => $data["message"],
+ 'msg' => htmlentities($data["message"]),
);