Re: Possible exploit?

[Knute Johnson <apache@xxxxxxxxxxxxxxxx>]

On 2/12/2014 08:43, rahul bhola wrote:
> because of HTTP Response 302 a safe bet would be to say he didnt get
> anything still i would recommend you to sanitize the data u get from
> parameter command and cmd.
> Also simply go to the url to see what he saw

To what URL?  What do you mean sanitize?

Thanks,

--

Knute Johnson

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx