Recent changes to bugshttps://sourceforge.net/p/file/bugs/2005-04-24T20:59:01ZRecent changes to bugsSecurity problem2005-04-24T20:59:01Z2005-04-24T20:59:01ZAnonymoushttps://sourceforge.net/u/userid-None/https://sourceforge.netae7d3f799323c801da6d9ba63fdd82f4105b475c<div class="markdown_content"><p>Hi!</p>
<p>I found that if I change request string manualy I can<br />
gain access to parent directory (relative to user's<br />
home dir).</p>
<p>For example:</p>
<p>http:// my site<br />
/fileadmin.php?op=home&folder=/home/user/www/site3/public_html/../../</p>
<p>where /home/user/www/site3/public_html/ was user's home<br />
dir.</p>
<p>GLoom<br />
gloom@gloo.ru</p></div>Upload problem with large file sizes2003-07-04T17:31:47Z2003-07-04T17:31:47Zhttps://sourceforge.nethttps://sourceforge.net8729478829b38d7e3911cd55c02b41db6fb1f2b1<div class="markdown_content"><p>When uploading a large file instead of returning the name <br />
of the file to the script it will return 'none'. This results <br />
in a failure to upload.</p></div>