Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Robert Scheck 2aea28c4f9 Security fix to avoid arbitrary code execution when using Zarafa database user backend ... Without this patch the following works: - Set PLUGIN_PASSWD_USER_DEFAULT_ENABLE in passwd/config.php to true - Logon at Zarafa WebApp, go to "Settings", choose "Change Password" - Change the password successfully to e.g. "password; touch /tmp/abc" - Result: -rw-r--r--. 1 apache apache 0 Feb 13 01:06 /tmp/abc		2015-02-13 01:06:54 +01:00
..
class.passwdmodule.php	Security fix to avoid arbitrary code execution when using Zarafa database user backend	2015-02-13 01:06:54 +01:00
plugin.passwd.php	fix setting name copy paste	2013-12-23 00:57:31 +05:30