Ticket #2602 (new security issue)
Opened 2 years ago
No Slash in front of Alias
|Reported by:||fragger||Owned by:|
|Component:||Frontend / Engine||Version:||ispCP ω 1.0.7|
a customer has added his Alias, but he has forget the slash at the front of the path. I haven't see this, i have activate his request and ispCP has add a new folder in virtual like customer.domain.tldPATH
I think bad guys can do some Shit with this, when the admins don't look at this.
Sorry for my bad English!