File: 37-url-decoding-bug-2.test

package info (click to toggle)
libapache-mod-security 1.8.7-1
  • links: PTS
  • area: main
  • in suites: sarge
  • size: 1,132 kB
  • ctags: 664
  • sloc: ansic: 7,641; perl: 199; makefile: 59; sh: 44
file content (8 lines) | stat: -rw-r--r-- 244 bytes parent folder | download 
1
2
3
4
5
6
7
8
 
# 37 URL decoding bug 2
#
# in a previous version of mod_security double slash
# removal was being done during the URL decoding phase
# and this particular case was not handled properly 
#
GET /cgi-bin/modsec-test.pl?f=/etc%2f/passwd HTTP/1.0