19 lines
804 B
PHP
19 lines
804 B
PHP
$NetBSD: patch-host.php,v 1.1 2014/01/08 20:51:28 tron Exp $
|
|
|
|
Fix vulnerability reported in SA54531. Patch taken from here:
|
|
|
|
http://svn.cacti.net/viewvc?view=rev&revision=7420
|
|
|
|
--- host.php.orig 2013-08-07 03:31:19.000000000 +0100
|
|
+++ host.php 2014-01-08 20:26:33.000000000 +0000
|
|
@@ -149,6 +149,9 @@
|
|
if ($_POST["snmp_version"] == 3 && ($_POST["snmp_password"] != $_POST["snmp_password_confirm"])) {
|
|
raise_message(4);
|
|
}else{
|
|
+ input_validate_input_number(get_request_var_post("id"));
|
|
+ input_validate_input_number(get_request_var_post("host_template_id"));
|
|
+
|
|
$host_id = api_device_save($_POST["id"], $_POST["host_template_id"], $_POST["description"],
|
|
trim($_POST["hostname"]), $_POST["snmp_community"], $_POST["snmp_version"],
|
|
$_POST["snmp_username"], $_POST["snmp_password"],
|