Merge pull request #9 from krissss/8-remote-code-execution-rce-via-line-parameter-in-tail-function

fix: RCE

Author: krissss

.gitignore

@@ -0,0 +1,3 @@
+.idea
+composer.lock
+vendor

composer.json

@@ -17,5 +17,16 @@
         "psr-4": {
             "kriss\\logReader\\": "src"
         }
+    },
+    "repositories": [
+        {
+            "type": "composer",
+            "url": "https://asset-packagist.org"
+        }
+    ],
+    "config": {
+        "allow-plugins": {
+            "yiisoft/yii2-composer": true
+        }
     }
 }

src/controllers/DefaultController.php

@@ -160,6 +160,7 @@ public function actionDownload($slug, $stamp = null)
     public function actionTail($slug, $line = 100, $stamp = null)
     {
         $log = $this->find($slug, $stamp);
+        $line = intval($line);
         if ($log->isExist) {
             $result = shell_exec("tail -n {$line} {$log->fileName}");