UNLOZE/sourcemod
10
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
91a1fd074b
sourcemod/plugins
History
Peace-Maker 91a1fd074b Fix sql injection in sql-admin-manager plugin 
This bug was found as part of justCTF 2020 in the PainterHell challenge by cypis. Thank you!

Admins with the root flag could inject their own queries towards the admin database connection.

The sql-admin-manager plugin is disabled by default.
2021-02-02 11:20:02 +01:00
..
admin-flatfile Update small plugins for transitional syntax (#506) 2016-05-11 09:32:34 -04:00
adminmenu Fully convert dynamicmenu to transitional enum structs. (#1082) 2019-09-15 14:02:46 -07:00
basebans Fixed unauthorized menu usages (#1374) 2020-11-05 11:34:00 +01:00
basecomm Improvements on !admin menu flags (#1364) 2020-10-24 23:52:35 +00:00
basecommands Fixed unauthorized menu usages (#1374) 2020-11-05 11:34:00 +01:00
basevotes Prevent voteban evading & add ban length cvar (#1249) 2020-06-13 16:00:44 -07:00
funcommands Use GetCmdArgInt(Ex) in base plugins (#1203) 2020-03-04 22:07:00 +00:00
funvotes Ignore vote actions if target is no longer available (#649) 2017-08-22 20:56:12 +01:00
include Update note about non-existing SQL_MoreResults (#1416) 2021-01-14 14:50:15 +00:00
playercommands Making rename's LogAction message consistent... (#696) 2017-09-26 20:22:38 -04:00
testsuite Use GetCmdArgInt(Ex) in base plugins (#1203) 2020-03-04 22:07:00 +00:00
admin-sql-prefetch.sp Update small plugins for transitional syntax (#506) 2016-05-11 09:32:34 -04:00
admin-sql-threaded.sp Introduce enum structs to core sm plugins 2018-12-15 13:51:03 -08:00
adminhelp.sp Replace GetCmdArgs with args param (#1229) 2020-05-08 15:09:44 -07:00
adminmenu.sp Create GlobalForward & PrivateForward methodmaps (#1004) 2019-05-29 14:17:42 -07:00
AMBuilder Remove use of the Dep API. 2020-08-24 20:48:57 -07:00
antiflood.sp Introduce enum structs to core sm plugins 2018-12-15 13:51:03 -08:00
basebans.sp Introduce enum structs to core sm plugins 2018-12-15 13:51:03 -08:00
basechat.sp Do not require quotes around message in sm_psay (#1300) 2020-07-01 18:58:20 +01:00
basecomm.sp Fix basecomm failing to load on games without sv_alltalk (#1212) 2020-03-11 21:24:16 -07:00
basecommands.sp Prevent basecommands from printing to disconnected clients (#1138) 2020-02-06 22:32:16 -08:00
basetriggers.sp Collection of plugin cleanups (#777) 2018-07-12 11:16:18 -07:00
basevotes.sp Prevent voteban evading & add ban length cvar (#1249) 2020-06-13 16:00:44 -07:00
clientprefs.sp cookies: Align output with sm_help (#977) 2020-07-08 20:38:35 -07:00
compile.sh Add spacing to compile.sh (#53) 2016-10-24 14:50:24 +01:00
funcommands.sp Change sm_beacon to use game-specific team colors (#1187) 2020-02-23 14:03:00 +00:00
funvotes.sp Fix wrong formatting to "Vote Delay Minutes" when delay above 60s (#1009) 2019-05-13 00:20:47 +01:00
mapchooser.sp mapchooser: Add option for persistent map storage (#1183) 2020-07-08 19:56:26 -07:00
nextmap.sp Alert players of map history console output (#1242) 2020-05-08 15:04:57 -07:00
nominations.sp Prevent clients from spamming global chat using sm_nominate (#1217) 2020-03-21 17:24:45 +00:00
playercommands.sp Update small plugins for transitional syntax (#506) 2016-05-11 09:32:34 -04:00
randomcycle.sp Add new function: GetMapDisplayName. 2015-09-15 16:16:58 -04:00
reservedslots.sp Update small plugins for transitional syntax (#506) 2016-05-11 09:32:34 -04:00
rockthevote.sp Collection of plugin cleanups (#777) 2018-07-12 11:16:18 -07:00
sounds.sp Show errors for methods that are unused. (bug 6183) 2014-07-12 10:28:29 -07:00
sql-admin-manager.sp Fix sql injection in sql-admin-manager plugin 2021-02-02 11:20:02 +01:00