News for hackers. Stuff that matters.

A comment on The V Programming Language is open source. Parent comment

Re:The V Programming Language is open source by yjftsjthsd-h on Saturday June 22, 2019 @07:56PM (#20252410)
What's insecure about curl and mkdir?
[ Parent | on HN ]
Re:The V Programming Language is open source by edgeyboy on Sunday June 23, 2019 @02:38AM (#20253638)
They're called through os.system.

Say that you have a website that relies on downloading content from URLs supplied by users. A user can send a "specially constructed" URL ("anything;commandgoeshere") and run any command they'd like on your server.

[ Parent | on HN ]