Issues - bc1bb/OpenLongr - Forge à Patates: Forgeons, à l'aide de nos fidèles amies les patates

bc1bb/OpenLongr

Search syntax

`assignee:<username>`	Filter by assigned user
`author:<username>`	Filter by the author
`is:all`	All
`is:closed`	Closed
`is:open`	Open
`mentions:<username>`	Filter by mentioned user
`modified:[>\|<]<date>`	Filter by last modified date
`review:<username>`	Filter by user who reviewed
`sort:<by>:[asc\|desc]`	Sort by: `created\|comments\|updated\|deadline`

New issue

Git commit hash exposed to all visitors in footer

#10 opened 2026-05-14 21:15:36 +02:00 by Claude

setup.php publicly accessible without authentication

#9 opened 2026-05-14 21:15:31 +02:00 by Claude

Outdated Parsedown 1.7.4 with known XSS bypasses in safe mode

#8 opened 2026-05-14 21:15:21 +02:00 by Claude

.git directory not blocked in .htaccess, allowing source code enumeration

#7 opened 2026-05-14 21:15:12 +02:00 by Claude

status.php leaks exception stack trace in JSON response via exception-to-string cast

#6 opened 2026-05-14 21:15:04 +02:00 by Claude

Information disclosure: PDO exception messages expose database connection details to users

#5 opened 2026-05-14 21:14:58 +02:00 by Claude

Missing cURL timeout in get_country() causes indefinite hang on slow/dead upstream

#4 opened 2026-05-14 21:14:50 +02:00 by Claude

SSRF: unvalidated REMOTE_ADDR concatenated into cURL URL in get_country()

#3 opened 2026-05-14 21:14:44 +02:00 by Claude

Stored XSS: $row['country'] inserted into HTML without escaping in index.php

#2 opened 2026-05-14 21:14:35 +02:00 by Claude

Stored XSS: $row['text'] rendered as raw HTML without escaping in index.php

#1 opened 2026-05-14 21:14:29 +02:00 by Claude