CVE-2022-45182 (published 2022-11-11T20:15Z)

Pi-Star_DV_Dash (for Pi-Star DV) before 5aa194d mishandles the module parameter.

CVSS v3 base score: 9.8, CRITICAL (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Weakness information:
cwe_id: NVD-CWE-noinfo
cwe_name: Insufficient Information
description: There is insufficient information about the issue to classify it; details are unkown or unspecified.
extended_description: Insufficient Information

Fix information:
repo_url: https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash
commit_details: repo_url: https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash
author: MW0MWZ
author_date: 2022-10-03 16:43:16+01:00
msg: Update link_manager.php

probably better fix for #169
repository: repo_url: https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash
repo_name: AndyTaylorTweet/Pi-Star_DV_Dash
description: Pi-Star DV Dashboard (Based on works by Hans-J. Barthen (DL5DI) and Kim Huebel (DG9VH)).
repo_language: PHP
owner: AndyTaylorTweet
file_changes: filename: link_manager.php
change_type: ModificationType.MODIFY
diff: @@ -10,7 +10,10 @@ if ($_POST["Link"] == "LINK") {
 	if (preg_match('/[^A-Z]/',$_POST["Letter"])) { unset ($_POST["Letter"]);}
 	if (preg_match('/[^A-Z0-9 ]/',$_POST["Module"])) { unset ($_POST["Module"]);}
 	}
-
+if ($_POST["Link"] == "UNLINK") {
+	if (preg_match('/[^A-Z0-9 ]/',$_POST["Module"])) { unset ($_POST["Module"]);}
+	}
+	
 if (empty($_POST["RefName"]) || empty($_POST["Letter"]) || empty($_POST["Module"])) { echo "Somthing wrong with your input, try again";}
 
 
@@ -22,8 +25,7 @@ else {
 	}
 	$targetRef = $targetRef.$_POST["Letter"];
 	$targetRef = strtoupper($targetRef);
-	$module = substr($_POST["Module"], 0, 7);
-	$module = preg_replace("/[^a-zA-Z0-9]+/", "", $module);
+	$module = $_POST["Module"];
 
         if (strlen($module) != 8) {							//Fix the length of the module information
 		$moduleFixedCs = strlen($module) - 1;                                   //Length of the string, -1

programming_language: PHP
repo_url: https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash
commit_details: repo_url: https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash
author: MW0MWZ
author_date: 2022-10-03 20:16:07+01:00
msg: Update admin.php

More fixes relating to #169
repository: repo_url: https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash
repo_name: AndyTaylorTweet/Pi-Star_DV_Dash
description: Pi-Star DV Dashboard (Based on works by Hans-J. Barthen (DL5DI) and Kim Huebel (DG9VH)).
repo_language: PHP
owner: AndyTaylorTweet
file_changes: filename: admin.php
change_type: ModificationType.MODIFY
diff: @@ -26,7 +26,9 @@ if ($_POST["Link"] == "LINK") {
 	if (preg_match('/[^A-Z]/',$_POST["Letter"])) { unset ($_POST["Letter"]);}
 	if (preg_match('/[^A-Z0-9 ]/',$_POST["Module"])) { unset ($_POST["Module"]);}
 	}
-
+if ($_POST["Link"] == "UNLINK") {
+	if (preg_match('/[^A-Z0-9 ]/',$_POST["Module"])) { unset ($_POST["Module"]);}
+	}
 if (empty($_POST["RefName"]) || empty($_POST["Letter"]) || empty($_POST["Module"])) { echo "Somthing wrong with your input, try again";}
 
 

programming_language: PHP
repo_url: https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash
commit_details: repo_url: https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash
author: MW0MWZ
author_date: 2022-10-03 16:23:36+01:00
msg: Update link_manager.php

Fix #169
repository: repo_url: https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash
repo_name: AndyTaylorTweet/Pi-Star_DV_Dash
description: Pi-Star DV Dashboard (Based on works by Hans-J. Barthen (DL5DI) and Kim Huebel (DG9VH)).
repo_language: PHP
owner: AndyTaylorTweet
file_changes: filename: link_manager.php
change_type: ModificationType.MODIFY
diff: @@ -22,7 +22,8 @@ else {
 	}
 	$targetRef = $targetRef.$_POST["Letter"];
 	$targetRef = strtoupper($targetRef);
-	$module = $_POST["Module"];
+	$module = substr($_POST["Module"], 0, 7);
+	$module = preg_replace("/[^a-zA-Z0-9]+/", "", $module);
 
         if (strlen($module) != 8) {							//Fix the length of the module information
 		$moduleFixedCs = strlen($module) - 1;                                   //Length of the string, -1

programming_language: PHP