https://sourceforge.net/p/file/bugs/Recent changes to bugsenSun, 24 Apr 2005 20:59:01 -0000https://sourceforge.net/p/file/bugs/2/<div class="markdown_content"><p>Hi!</p> <p>I found that if I change request string manualy I can<br /> gain access to parent directory (relative to user's<br /> home dir).</p> <p>For example:</p> <p>http:// my site<br /> /fileadmin.php?op=home&amp;folder=/home/user/www/site3/public_html/../../</p> <p>where /home/user/www/site3/public_html/ was user's home<br /> dir.</p> <p>GLoom<br /> gloom@gloo.ru</p></div>AnonymousSun, 24 Apr 2005 20:59:01 -0000https://sourceforge.netae7d3f799323c801da6d9ba63fdd82f4105b475chttps://sourceforge.net/p/file/bugs/1/<div class="markdown_content"><p>When uploading a large file instead of returning the name <br /> of the file to the script it will return 'none'. This results <br /> in a failure to upload.</p></div>Fri, 04 Jul 2003 17:31:47 -0000https://sourceforge.net8729478829b38d7e3911cd55c02b41db6fb1f2b1