New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Shell injection through any variable in Build.pm #9

Open

AlexDaniel opened this issue Jan 11, 2018 · 0 comments

AlexDaniel commented Jan 11, 2018

perl6-IUP/Build.pm

Lines 17 to 21 in d92d710

    
           shell($c_line); 
        
           shell($l_line); 
        
           shell("rm src/$name$o"); 
        
           shell("mkdir -p blib/lib"); 
        
           shell("cp src/$name$so blib/lib");

↑ I don't know if these are harmful, but perhaps it'll be much better if these were rewritten without shell?

The text was updated successfully, but these errors were encountered:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment