security hole with pathinfo

[vpaste] / index.cgi

diff --git a/index.cgi b/index.cgi
index cdfaa82dd40f1c8d84688153d1f1facaeae8b3bb..a9f2465d54469bfbfb7cf2d8d10aba2768b0d917 100755 (executable)
--- a/index.cgi
+++ b/index.cgi
@@ -178,7 +178,7 @@ EOF
 }
 
 # Main
-pathinfo="${SCRIPT_URL/*vpaste\/}"
+pathinfo="${SCRIPT_URL/*\/}"
 
 if [ "$pathinfo" ]; then
        do_print "$pathinfo"