Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

phpThumb/FD1 #201

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

phpThumb/FD1 #201

wants to merge 2 commits into from

Conversation

mcdruid
Copy link
Contributor

@mcdruid mcdruid commented Nov 26, 2024

Very simple FD gadget chain, which should work in all releases until the next.


class FD1 extends \PHPGGC\GadgetChain\FileDelete
{
public static $version = 'v1.7.12 <= v1.7.22';
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
public static $version = 'v1.7.12 <= v1.7.22';
public static $version = '<= v1.7.22';

Since you said it would work on all version before this one.

Copy link
Contributor Author

@mcdruid mcdruid Nov 26, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yup, we could do that.

Somewhat strangely it seems that v1.7.12 is the first release, at least in the project's current incarnation:

https://github.com/JamesHeinrich/phpThumb/tags

@nollium nollium added the gadget chain This issue could yield a new gadget chain. label Feb 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
gadget chain This issue could yield a new gadget chain.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants