-
Notifications
You must be signed in to change notification settings - Fork 14.1k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Clean up some of the module's documentation
- Loading branch information
1 parent
80a8ffd
commit 9cf4372
Showing
2 changed files
with
4 additions
and
3 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,4 +1,4 @@ | ||
*## Vulnerable Application | ||
## Vulnerable Application | ||
pgAdmin versions <= 8.3 have a path traversal vulnerability within their session management logic that can allow a | ||
pickled file to be loaded from an arbitrary location. This can be used to load a malicious, serialized Python object to | ||
execute code within the context of the target application. | ||
|
@@ -41,6 +41,8 @@ For a production setup, a server like Apache should be setup to run pgAdmin thro | |
1. [Download][1] and install the Windows build | ||
1. Copy the `config_distro.py` file to `config_local.py` | ||
1. Edit `config_local.py` and set `SERVER_MODE` to `True` | ||
1. Upgrade pip: `..\python\python.exe -m pip upgrade` | ||
1. Install python package required by `setup.py`: `..\python\python.exe -m pip install "psycopg[binary,pool]"` | ||
1. Initialize the database: `..\python\python.exe setup.py setup-db` | ||
1. Create an initial user account: `..\python\python.exe setup.py add-user --admin [email protected] Password1!` | ||
1. Run the application: `..\python\python.exe pgAdmin4.py` | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters