Uploaded image for project: 'phpBB'
  1. phpBB
  2. PHPBB-12172

"Download all attachments" feature leaks post/pm attachments when being able to download one of them

XMLWordPrintable

      Download all link for Post#9 and PM#9 are both the same:
      phpBB/download/file.php?archive=.zip&post_msg_id=9

            nickvergessen Joas Schilling
            nickvergessen Joas Schilling
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: