| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2026-01-05 | Fix possible arbitrary code execution on misconfigured deployments | jvoisin | |
| When `upload_validation` is enabled, and when VLD isn't installed, an attacker sending a multipart POST is able to get arbitrary PHP content executed. Reported-By: thomas-chauchefoin-tob | |||
| 2018-12-15 | Provide a php script, to get rid of the python one for test suite | Remi Collet | |
| This commit adds a php version of the upload_validation.py script. | |||
