Fix for CVE-2015-5243

This commit is contained in:
sparc 2015-09-04 17:41:56 +00:00
parent 18849d1a98
commit cb2d186975

View file

@ -363,11 +363,15 @@ while (list($key,$val) = each($rawdata))
{
if ($field != '')
{
$var = '$r'.getvarname($field);
//$var = '$r'.getvarname($field);
$itm = trim(substr($val,$pos+strlen($match)));
if ($itm!='')
eval($var.'="'.str_replace('"','\"',$itm).'";');
//eval($var.'="'.str_replace('"','\"',$itm).'";');
{
$var = 'r'.getvarname($field);
$$var = str_replace('"','\"',$itm);
}
}
if (!$scanall)