frodovdr/raspap-webgui
1
0
Fork 0
mirror of https://github.com/billz/raspap-webgui.git synced 2023-10-10 13:37:24 +02:00
Code Issues Releases Wiki Activity

Remove webconsole, fixes RCE via json-rpc. Thanks @lb0x

Browse Source
This commit is contained in:
billz 2020-08-22 11:41:33 +01:00
parent 267f31785a
commit dd5ab7bdc2
7 changed files with 0 additions and 980 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
app/css/custom.php
View File

@ -129,21 +129,6 @@ i.fa.fa-bars:hover{
float: left; float: left;
} }
.webconsole {
width:100%;
height:100%;
border:1px solid;
}
#console {
height:500px;
}
.systemtabcontent {
height:100%;
min-height:500px;
}
.service-status { .service-status {
border-width: 0; border-width: 0;
} }

10
app/css/lightsout.css
View File

@ -357,16 +357,6 @@ color: #d2d2d2 !important
border-color: #404040; border-color: #404040;
} }
.webconsole {
width: 100%;
height: 20rem;
border: 1px solid #404040;
}
#console {
height: 500px;
}
tspan, rect { tspan, rect {
fill: #d2d2d2; fill: #d2d2d2;
} }

0
includes/adblock.php Normal file → Executable file
View File

0
includes/internetRoute.php Normal file → Executable file
View File

938
includes/webconsole.php
View File

File diff suppressed because one or more lines are too long

6
templates/system.php
View File

@ -16,19 +16,13 @@
<li role="presentation" class="nav-item"><a class="nav-link active" id="basictab" href="#basic" aria-controls="basic" role="tab" data-toggle="tab"><?php echo _("Basic"); ?></a></li> <li role="presentation" class="nav-item"><a class="nav-link active" id="basictab" href="#basic" aria-controls="basic" role="tab" data-toggle="tab"><?php echo _("Basic"); ?></a></li>
<li role="presentation" class="nav-item"><a class="nav-link" id="languagetab" href="#language" aria-controls="language" role="tab" data-toggle="tab"><?php echo _("Language"); ?></a></li> <li role="presentation" class="nav-item"><a class="nav-link" id="languagetab" href="#language" aria-controls="language" role="tab" data-toggle="tab"><?php echo _("Language"); ?></a></li>
<li role="presentation" class="nav-item"><a class="nav-link" id="advancedtab" href="#advanced" aria-controls="advanced" role="tab" data-toggle="tab"><?php echo _("Advanced"); ?></a></li> <li role="presentation" class="nav-item"><a class="nav-link" id="advancedtab" href="#advanced" aria-controls="advanced" role="tab" data-toggle="tab"><?php echo _("Advanced"); ?></a></li>
<li role="presentation" class="nav-item"><a class="nav-link" id="consoletab" href="#console" aria-controls="console" role="tab" data-toggle="tab"><?php echo _("Console"); ?></a></li>
</ul> </ul>
<div class="systemtabcontent tab-content">
<!-- Tab panes --> <!-- Tab panes -->
<div class="tab-content"> <div class="tab-content">
<?php echo renderTemplate("system/basic", $__template_data) ?> <?php echo renderTemplate("system/basic", $__template_data) ?>
<?php echo renderTemplate("system/language", $__template_data) ?> <?php echo renderTemplate("system/language", $__template_data) ?>
<?php echo renderTemplate("system/advanced", $__template_data) ?> <?php echo renderTemplate("system/advanced", $__template_data) ?>
<?php echo renderTemplate("system/console", $__template_data) ?>
</div><!-- /.tab-content --> </div><!-- /.tab-content -->
</div><!-- /.systemtabcontent -->
</form> </form>
</div><!-- /.card-body --> </div><!-- /.card-body -->
<div class="card-footer"></div> <div class="card-footer"></div>

11
templates/system/console.php
View File

@ -1,11 +0,0 @@
<!-- console tab -->
<div role="tabpanel" class="tab-pane" id="console">
<div class="row">
<div class="col-lg-12 mt-3">
<?php if (!RASPI_MONITOR_ENABLED) : ?>
<iframe src="/includes/webconsole.php" class="webconsole"></iframe>
<?php endif ?>
</div>
</div>
</div>