Comment to task #5584 in Backend / Core: Flyspray shows raw SQL queries in some circumstances

Flyspray - The bug killer! btsadmin at pld-linux.org
Tue Jan 4 10:08:05 CET 2005


Project: PLD 2.x (Ac)
  
  Package: Backend / Core
  Summary: Flyspray shows raw SQL queries in some circumstances
  Commented by: Patryk Zawadzki (patrys)
  Comment: This can be a serious issue if you can malform the cookie to
contain some SQL code. This particular query seems to be safe against
SQL injection but if this is a Flyspray issue and not a PLD specific
one, it should be immediately reported to the authors for inspection.

For more further see:
http://bugs.pld-linux.org/index.php?do=details&id=5584&area=comments#tabs}

------------------------------------------------------------------------
THIS IS AN AUTOMATICALLY GENERATED MESSAGE, DO NOT REPLY





More information about the pld-bugs mailing list