Robert Scheck 2aea28c4f9 Security fix to avoid arbitrary code execution when using Zarafa database user backend ... Without this patch the following works: - Set PLUGIN_PASSWD_USER_DEFAULT_ENABLE in passwd/config.php to true - Logon at Zarafa WebApp, go to "Settings", choose "Change Password" - Change the password successfully to e.g. "password; touch /tmp/abc" - Result: -rw-r--r--. 1 apache apache 0 Feb 13 01:06 /tmp/abc		2015-02-13 01:06:54 +01:00
..
class.passwdmodule.php	Security fix to avoid arbitrary code execution when using Zarafa database user backend	2015-02-13 01:06:54 +01:00
plugin.passwd.php	fix setting name copy paste	2013-12-23 00:57:31 +05:30