tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-07-24 06:15:16 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch '224-cve-2024-9987-sql-injection-en-obtencion-csv-datos-de-modulo' into 'develop'

Browse Source 
Resolve "[CVE-2024-9987] SQL Injection en obtención csv datos de modulo"

See merge request artica/pandorafms!7462
This commit is contained in:
Enrique Martin 2024-12-09 15:40:05 +00:00
commit 3bed3bbac4
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pandora_console/include/functions_modules.php
View File

@ -4779,6 +4779,7 @@ function export_agents_module_csv($filters)
{
$query_filter = '';
foreach ($filters as $key => $filter) {
$filter = io_safe_input($filter);
switch ($key) {
case 'group_id':
if ($filter != 0) {
@ -4804,7 +4805,7 @@ function export_agents_module_csv($filters)
if (count($filter) > 0) {
if (is_numeric($filter[0]) === false) {
foreach ($filter as $key => $module) {
$filter[$key] = io_safe_input($module);
$filter[$key] = $module;
}
$module_filter = '(\''.implode("', '", $filter).'\')';