mirror/librenms-librenms
1
0
Fork 0
mirror of https://github.com/librenms/librenms.git synced 2024-10-07 16:52:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix injection vulnerability in fdb search page (#15315)

Browse Source 
unescaped search output
reported by: https://huntr.dev/users/hainguyen0207
This commit is contained in:
Tony Murray
2023-09-14 00:22:42 -05:00
committed by GitHub
parent cfd642be6a
commit 2c5960631c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
includes/html/pages/search/fdb.inc.php
View File

@@ -112,7 +112,7 @@ if ($vars['searchby'] == 'vlan') {
"<div class=\"form-group\">"+
"<input type=\"text\" name=\"searchPhrase\" id=\"address\" value=\""+
<?php
echo '"' . $vars['searchPhrase'] . '"+';
echo '"' . htmlspecialchars($vars['searchPhrase']) . '"+';
?>
"\" class=\"form-control input-sm\" placeholder=\"Value\" />"+