[mythtv] (no subject)
Henk Poley
hpoley at dds.nl
Mon Jul 19 01:39:44 EDT 2004
Op zondag 18 juli 2004 23:19, schreef Dick Smits:
> Hello,
>
> When processing RSS feeds with mythnews I sometimes get a URL in the feed
> that contains the characters ";" or "&". When you press the ENTER button
> mythbrowser is called to display the newsarticle.The does not work when
> these characters are present in the URL. The myth_system call used for this
> needs the escaped string (a la shell).
>
> Example myth_system argument from nu.nl:
> /usr/bin/mythbrowser -z 115 http://nu.nl/news.jsp?n=360482&c=61
>
> This should be:
> /usr/bin/mythbrowser -z 115 http://nu\.nl/news\.jsp\?n=360482\&\;c=61
Hmm, this should be fixed, in 'real world applications' this is called a
remote code excution exploit...
Henk Poley <><
More information about the mythtv-dev
mailing list