[sword-devel] Security problem/Servlet bug

DM Smith dmsmith555 at yahoo.com
Wed Aug 18 05:36:30 MST 2004


If there is a typo in the modName of a module sent to the servlet:
http://crosswire.org/sword/servlet/SwordMod.Verify?modName=GerLut&pkgType=raw
It will create a zero length file in ftp.crosswire.org/pub/sword/packages/rawzip
porra.zip is an example.
Sorry about that, I was testing for some changes to JSword and goofed up the name.



More information about the sword-devel mailing list